PO# PUR-ORD-2023-02758[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO# PUR-ORD-2023-02758.exe
Size

624KB
MD5

8abc0c0acb6d301fcca96b52d67832fa
SHA1

1220c8f6e318631edaf786ed4a087e010c18129f
SHA256

0d586804ddca6f238cc255491bdef2b71a2b1f378260f37745f547830fcd9695
SHA512

9a29cb65435ee3f5a18b28ce402d69c6562ff8822ef1d7f278803f2572b142c574d188d68bd3f921eb382ec46358cb21fe482d2342a24ce62469c62687be441f
SSDEEP

12288:9R/jqCs39nUdwmSG1q/2BMjqr19kC8HmG05qTt6Eg1V90lmZ:TLqzsdSYqfm9qTt6Eg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO# PUR-ORD-2023-02758.exe

Files

PO# PUR-ORD-2023-02758.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ