Static task
static1
Behavioral task
behavioral1
Sample
purchase order #43423.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
purchase order #43423.exe
Resource
win10v2004-20231023-en
General
-
Target
purchase order #43423.exe
-
Size
917KB
-
MD5
f018fc17541405657d164bc4d1e46c5b
-
SHA1
8f8dc0f26de579420e23aab92a3adf36fbc9aec1
-
SHA256
f35c56911d58753abb244cf6c07e780fdb30de306e454fedc8e20dd230b71ffa
-
SHA512
a2d901f61439d961d01700cd6c585de9c51000a5105ef4a4e93c6e7f763bb215006f5ff265b8afda8543d72edd6c33447076f555fb3df130540d34fec7646435
-
SSDEEP
12288:SWATNX43b6b0AFnSCORaE7ufuh3IGaqo4Yp1m0cyM/i5AnSdIA9ayZAYPYkZK:f3b64qSGHnZaYjhxASdIA9aLT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource purchase order #43423.exe
Files
-
purchase order #43423.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 733KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ