purchase_order[.]exe | Triage

Sharing

General

Target

purchase_order.exe
Size

315KB
MD5

072c3199ba451fcfc9eea4d87f000ad2
SHA1

fe7990138d2c5df16eb407fd9cb828b7dad6430a
SHA256

0bddc6655ba739d631907c6b5063348789dd75356258f5aa846907342e77bec4
SHA512

3c34bf2cfe70ee20d110c245dc5271ce46b35d1167e5b52a59dfa56ae38a5552d4f0bb5ba60a494a9bf9a0ecd8dc9c2e71d582d7cc30d674a44c24bc6c363bc1
SSDEEP

6144:1oyZPhx6QTSm9+Vzq6PH1c2f6jTy3gNDzqiDe45XuvPpb8FuPdQSiiKsZtCqi/A8:NT9aH1c2f6jTy3gNDzqiDe45XuvPpbpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
purchase_order.exe

Files

purchase_order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ