purchase_request[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

purchase_request.exe
Size

48KB
MD5

e68e4e5b560677951def37842952e90f
SHA1

98e2e2bfa0637f7a324fc0a6abd4a9a6e94728c8
SHA256

94a9409512877b81097e167ed4c439363b7058bf7db869c3fe77d17a17090fd3
SHA512

95b8c2edd547b6023d9cb8ec5ea4c978284ff96c8edfaf9166db2770673d53ce0ea92b965de0ae4621be58fd803bbbb97e4a53309eb48239f548a218c852a82e
SSDEEP

768:MtguVNlQ6LZ3elzJDtgMcBseCdGqJtUHkTW/xK3j+jxqPDUaJi2On59FiXEIgwe3:QQkkzJDtgMcBseC0qLY9xK3j+jxqPenF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
purchase_request.exe

Files

purchase_request.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ