Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order_ ENQ REF_PDF____________________________..exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Purchase Order_ ENQ REF_PDF____________________________..exe
Resource
win10v2004-20230220-en
General
-
Target
Purchase Order_ ENQ REF_PDF____________________________.iso
-
Size
752KB
-
MD5
2425d66e15d827942966fb223f171091
-
SHA1
d58c0add0d862931a8e448d13e3d5346eb549e9a
-
SHA256
4d267708b0efc41d8dea528e0764547321a4a89db8750e69632b83db6fdad5f3
-
SHA512
aa1082bb0a3a409c06072fd8df36a96e956342d8068ea5e490bac7ef1392cf8c2c461d9ef2102f7b6a1b5801c0873c3a3e2f1cfef3a35b65e3bb287b862dfc6d
-
SSDEEP
12288:SKd7z5GoJiGaq5auljBSN3sVS5TazUl4Lv/xXoVK8Dis77EfGF+VCp:X5GoR5a+VV1ol4jiV5DLP3F+V6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order_ ENQ REF_PDF____________________________..exe
Files
-
Purchase Order_ ENQ REF_PDF____________________________.iso.iso
-
Purchase Order_ ENQ REF_PDF____________________________..exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 689KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ