Static task
static1
Behavioral task
behavioral1
Sample
SALE ORDER_7.6.2023.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
SALE ORDER_7.6.2023.exe
Resource
win10v2004-20230703-en
General
-
Target
SALE ORDER_7.6.2023.zip
-
Size
484KB
-
MD5
30acbc180fa4b6de40c08f1d2601704e
-
SHA1
2bc1bcbc208dc2a3263f46d99e43db949fe99d54
-
SHA256
1168535d055c6d8d993785a0223e953f71f7f761e13f7e5834c8d9211597bfb7
-
SHA512
510c4137699cc20841cca48b6aa0667a01aa07bb896e1543db5be4771922296d3abfbadf26504083aa45bd66316c8ee18e3c299c44ee035a2fe8b390278c9114
-
SSDEEP
12288:Rwb25KX/9wvaJurM9wF+Kf4XhzqebUnaGe3m+pAuf7fp:RcY6JWM9wcKf4xsaGe3m++uTfp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SALE ORDER_7.6.2023.exe
Files
-
SALE ORDER_7.6.2023.zip.zip
-
SALE ORDER_7.6.2023.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 532KB - Virtual size: 531KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ