Purchase Order10874[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order10874.exe
Size

631KB
MD5

d1a249424c215c49e09dbdff90976108
SHA1

7e36a2fd9c96a435ec6cbc3e1be4f838a8e98da2
SHA256

b900561fb670c0e97d474ae9d54a8505010dd9b182823b1bca74e7242bc72102
SHA512

49c1366a49cbc0974d8615d83a24f4448bd0e657831f1db211bc2b21b15454e6b92d545e196b5ebf9a6ce3b3e309aa09d5c70d5f88ce3d3530f27e508b4df7e0
SSDEEP

12288:iRCzcFMK6YgdcYGMy3eWE+HgHtkBSu7ZOc5bXGMDrP1VKtOJnK4ENzWK:FcFMKPUcCSenyBiUbGMDrPOOJhEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order10874.exe

Files

Purchase Order10874.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ