Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER #762812.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER #762812.exe
Resource
win10v2004-20230220-en
General
-
Target
PURCHASE ORDER #762812.exe
-
Size
480KB
-
MD5
9ba96ca6975b3149c424bb9d91f6ad57
-
SHA1
742584a7c378a8ac4e343da62d0830cee6710cdc
-
SHA256
c7c98357e83930e3cecf3ba9697aadb42541de1e7c9a143c30a93c16fe4b63d7
-
SHA512
54b5d5e5b43eeb77b2aa370e724d854f69d6af3e5687e94a7c772a68fbfd791300636be7f82360d4d601abfe6d02de6513bbb2e41dd3be493affb984e91ce261
-
SSDEEP
6144:nl76TbzSguh7kiDxnGr6QJ+kroYL2+Xv5VkTMmjAbssKssVs9SyENn:l767SBhkSGrPJ+io+V4ussKssVs9dA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE ORDER #762812.exe
Files
-
PURCHASE ORDER #762812.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ