Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20230703-en
General
-
Target
Purchase Order.zip
-
Size
497KB
-
MD5
28f06703769cf986e25bd037ec9a5dba
-
SHA1
a236a54ce9181119bd04a35fde02b1c1f11f871a
-
SHA256
49cbb16f08ab0f8acb25490d7bcb4559d63a0fff596f3276bfb2c315fb56020c
-
SHA512
4979cefa29fb6dfc6a6f900229da830a949f393b75d1e984c68ab90dfe616eacc94c5da7c5827d5b952174440f66ddb23681b7f88e64250a27d1a156639465d1
-
SSDEEP
12288:agbLJ5z0N9WKCjQmbxB26N5r4ILkVufOjQA:rX5jxxB26jRLT4QA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order.exe
Files
-
Purchase Order.zip.zip
-
Purchase Order.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 519KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ