Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
c7bcc8677d282afd6a5c4d5f19fc5667e2b9b89b9e97f63e911b41cd4998725c_JC.rar
-
Size
530KB
-
MD5
c3574c5fe1e6cf341214874a5576f5dc
-
SHA1
88ae2ce3e5dd5b6190de92791fe4729dc6ab02dc
-
SHA256
c7bcc8677d282afd6a5c4d5f19fc5667e2b9b89b9e97f63e911b41cd4998725c
-
SHA512
e023868b71747cecfea57c2ab8ab439fc8d624776d5bbe2378e56c9a00ef10021e0dfde76b5e192fdb60b597c2201f1bd866121bd43def1bf2633f1d1352e512
-
SSDEEP
12288:6RLj+rJn1paoNwpjk9ft9riXiNAtWdxUnqLRN/06P7G:6Rv+lnTNwVkz9riyStWPbRR06P7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PURCHASE ORDER.pdf.exe
Files
-
c7bcc8677d282afd6a5c4d5f19fc5667e2b9b89b9e97f63e911b41cd4998725c_JC.rar.rar
-
PURCHASE ORDER.pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ