Purchase Order,doc[.]exe

General

Target
Purchase Order,doc.exe
Size 1.0MB
Sample231023-nvkhmsac24
SHA256 38f03fd1a4f001df84def0205e1f58538ae3e6d08ee86ba2d90e3f203e82ebdf
MD5 b2fc27e20fc01089056df0b0751e8694
SHA1 59ed22415137de50063a4620f64cd16e25de91d6
SHA512 29f5cd7414f067b1c767453ce21a39787d7515bbfd10cc82ad66b58de6bd0930ab5eafc091cd0c196abafad51e94ef1394611d6f0bacad53e621d393c046a22f
SSDEEP 12288:CkvNfrPolXZuClWJKq8yP+O5hu4q79rPET3a+Yo7KTiR:N7WApE0hrqRYea+eR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order,doc.exe

File Explorer

Purchase Order,doc.exe

.exe 1.0MB

Purchase Order,doc.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 38f03fd1a4f001df84def0205e1f58538ae3e6d08ee86ba2d90e3f203e82ebdf
MD5 b2fc27e20fc01089056df0b0751e8694
SHA1 59ed22415137de50063a4620f64cd16e25de91d6
SHA512 29f5cd7414f067b1c767453ce21a39787d7515bbfd10cc82ad66b58de6bd0930ab5eafc091cd0c196abafad51e94ef1394611d6f0bacad53e621d393c046a22f
SSDEEP 12288:CkvNfrPolXZuClWJKq8yP+O5hu4q79rPET3a+Yo7KTiR:N7WApE0hrqRYea+eR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1096934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Purchase Order,doc.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order,doc.exe

mscoree

dotnet