PURCHSASE ORDER[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHSASE ORDER.exe
Size

821KB
MD5

0c0ea10e152f5080269f1737ac6829ed
SHA1

d0d09037ab3affee2f199909a170377a5d0f90d5
SHA256

eca38d03cfa86717e86a3deab218a3c4125a6b10a36825d178ac263731288d37
SHA512

55057da9e8b1fb3f6e75d58be4b72ab602e1d808455e60bb41602cc810a71c338decb11fad7efc39c94c081ea7e0c1b6819b91bddaadf395cd4f1466ad66c348
SSDEEP

12288:na+aJWU1vwDQ/2T5MU3/Wpvw1t/0SKo+ulaqjkv+zojvRNgXXI0u1VG76C3PZVzG:+Io2T5MC/WpvwfIoXauzuvRN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PURCHSASE ORDER.exe

Files

PURCHSASE ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ