Static task
static1
Behavioral task
behavioral1
Sample
Purchase1144770.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Purchase1144770.exe
Resource
win10v2004-20231023-en
General
-
Target
Purchase1144770.exe
-
Size
826KB
-
MD5
8f3f0004954afbe974e638e5c99ac8b3
-
SHA1
c3a584ab22a951b500e30f68eb43b48403c61712
-
SHA256
46d22a4b883bc7074c98641941e335b0ed43bbf67017d3f461f8dace83da6b55
-
SHA512
90287e8fd6f81cfe7a2f176c3ff215e5a24b1cd66277d8f9c560c8f38aa600eff80518b6a800f7aef4f419d99269797a8af29208a9527a7c2e60e6394ebe3fe1
-
SSDEEP
24576:JMeE0E+2v806V3UZOht7CulWXVGYfpBhtD/:bx2v806VkIhCuNY3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Purchase1144770.exe
Files
-
Purchase1144770.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 823KB - Virtual size: 822KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ