Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20231020-en
General
-
Target
Purchase Order.exe
-
Size
912KB
-
MD5
ff1dfcf9c9c16ea3db57b267cae3db5a
-
SHA1
74ac6d42301b8c3d398612761e968c8dc8888f87
-
SHA256
7c84245b302074df4877eed9eb06aaf99a4a342b2b88d50c4d008581325ce36c
-
SHA512
d70745d81a96113084205decfdc91c0292ee64c2112c76805bcfce562c04e9a19663c8a5b95368908b9416d81d24b119517c29ef1a92f17c71f6df347857a3fb
-
SSDEEP
12288:0NK/EvWXGFN/jjjNjm5GD/zHfOsPVeVTu7BrBQoq75wcflnvo1xQT74cS3wUeE78:0K78bjjpRDL//8MkmcdEx60cZovgYqN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Purchase Order.exe
Files
-
Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 904KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ