Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20230712-en
General
-
Target
Purchase Order.rar
-
Size
92KB
-
MD5
6641270ecc5f202b04fc01cbcd12c38a
-
SHA1
966ce8645329a52bdc5ae3e3bff53399df344146
-
SHA256
4d24764525d1b740135f5d2cdff2fab3c065224a306992ebc6124bf7f007ed6a
-
SHA512
ab02fa598cd61da6e4ce6c7d4fb49c2c4913451cb3aabbad6c7bbf50df2bbca865ddc706ac9f9698f114d6b5469a5820b8507ed919c21cef02d00ad4c0b7d66d
-
SSDEEP
1536:WNoryYyTW+FaTD2kwzqYk/kkwbLbB2By0ZPnjY+bRmUm8VeSs5gtwtkJ:GyyYE+TD2kwzS/kkwbv0zZvjTNer5g2y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order.exe
Files
-
Purchase Order.rar.rar
-
Purchase Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ