Static task
static1
Behavioral task
behavioral1
Sample
Purchase Enquiry 10042023-pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Purchase Enquiry 10042023-pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
ee9256650108e6959f96c7f6b6cf44ca996cad64b401f1ea31640c7475c1235d
-
Size
607KB
-
MD5
df7a76dda78d4482b35441a113fb9b07
-
SHA1
9bea98caf40a8e4a074eb49b2d8b916217fdd9c2
-
SHA256
ee9256650108e6959f96c7f6b6cf44ca996cad64b401f1ea31640c7475c1235d
-
SHA512
103c455453b1c95595b597e640be970903b06076d1e04929512395f17788c98125d7651666daddcd133231c7bdc7a28f269b67f8f0f7823241202819efdfad45
-
SSDEEP
12288:qrWGMyTt2iPi9y+ssv0jK0EVJOllxEE/IBG:qyG3t2iq82UKBVcllxj/eG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Enquiry 10042023-pdf.exe
Files
-
ee9256650108e6959f96c7f6b6cf44ca996cad64b401f1ea31640c7475c1235d.rar
-
Purchase Enquiry 10042023-pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 643KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ