Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER 4501226854_xlsx.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER 4501226854_xlsx.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.90ab81c85dc4579b44691ecb394bc7faf1819d635a51497ad94b9539081446b4.z
-
Size
593KB
-
MD5
56e227905a1436fc9f47d3bd8adf6ef7
-
SHA1
bd6588d810159bc735d469ab9b06ff67f9325d63
-
SHA256
90ab81c85dc4579b44691ecb394bc7faf1819d635a51497ad94b9539081446b4
-
SHA512
a263ef3651aa7d180f96e9dc150c0f40b06117f4adfcc810b547ad16a7709540803b7281ed2aa710fcba644c5c3b681a61686eb0700b1b5e5ec47a06e82a640a
-
SSDEEP
12288:st7YhzTEWhubmRPkGne9ipO8XYoZJ5ND7AaNTSVhCyC3sNX1V5XzcbGV:kMvUbmRP5neipfYoZJ5NDsaNTmhCL3sf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PURCHASE ORDER 4501226854_xlsx.exe
Files
-
NEAS.90ab81c85dc4579b44691ecb394bc7faf1819d635a51497ad94b9539081446b4.z.rar
-
PURCHASE ORDER 4501226854_xlsx.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 716KB - Virtual size: 715KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ