New Purchase Order[.]exe | Triage

Sharing

General

Target

New Purchase Order.exe
Size

680KB
MD5

643062ea861a7196b0df63d3e4255b49
SHA1

3f68331238a454483ec074f496da2d86b2f62b33
SHA256

bdc8c2c8c2cf14b3189551124ff820c303a36139830b0ce299f2538ef9c2ff06
SHA512

4280de1611cee42ea7f176ec518c6b444723effc4fa1cdbd640d8833935b88f8f92aa5284f76d31a237f367d7f68727f0c4ecf84409621508befacfebd6e9b15
SSDEEP

12288:ZWc/bUYIsYoln7v3T4Fv9g1SCuTaei676+7r8iJcxivpckh+0xYQ71kn/U5g:MiXrYomF9gihx6Mr8i7mkhbGa2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Purchase Order.exe

Files

New Purchase Order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 667KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ