Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.pdf_______________________________________________________.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.pdf_______________________________________________________.exe
Resource
win10v2004-20231023-en
General
-
Target
PURCHASE ORDER.pdf_______________________________________________________.exe
-
Size
582KB
-
MD5
c5ce73367f223751904bf5e50b9f4a58
-
SHA1
b724fc8549284e42128d4d01c4c07500398b92cd
-
SHA256
cb7de7bc680acafc54395cc399b1a38c440424738270c4bbd005b4a13229fc39
-
SHA512
17fd6b21bea5c735ae79ec6aac4b45b0d3a8965ee310ab6010032ee95c5a727df725127fecc8007779fbb4f418b31f3f3292b5f10a695a8b8fee23fd0e8a1d76
-
SSDEEP
12288:yBLXmsrJM1Au+YtXiI2uiLHW3puKTNhgAdumf0xAV8eiSn9R:CLWiM6u+YY3uiLmuKphf4u2Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE ORDER.pdf_______________________________________________________.exe
Files
-
PURCHASE ORDER.pdf_______________________________________________________.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 570KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ