Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order-0338.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Purchase Order-0338.exe
Resource
win10v2004-20231023-en
General
-
Target
Purchase Order-0338.exe
-
Size
681KB
-
MD5
36bf523293aad3073756879d8f696c22
-
SHA1
6b64afa673a4c114bcd9534b4e97f848dfc0d7f8
-
SHA256
35cbbbddee1a236620f786274d0fc5305968d2050dfe1897d4fb789ee75d8536
-
SHA512
c7679cbd906133e0994232242c5ca42416a2d57e9f9d122e700db2ccc7b244d3dc90a2da16cbf049edf107d6ed7a565f5f9f5ce585281926656315f51a3f5df1
-
SSDEEP
12288:Cw16zBhvwmoG2Xhc8Fay/1k9eTXMSEZ5w8e/j:mBhvwLy00wTXM5C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Purchase Order-0338.exe
Files
-
Purchase Order-0338.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ