Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order 6270-23_pdf .exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
Purchase Order 6270-23_pdf .exe
Resource
win10v2004-20231130-en
General
-
Target
52e7982d1590992890ac62adf827259751a75238e3b58c6ad44802a525e7e6e5
-
Size
76KB
-
MD5
b7e24e012e69e20647366cb3287807c6
-
SHA1
e632bb928db7600cd9fb6f2588e80cffc3e07b83
-
SHA256
52e7982d1590992890ac62adf827259751a75238e3b58c6ad44802a525e7e6e5
-
SHA512
667f2f1e51eee84084d9de3085eead1216e4ac8faf019c8e027aca31b76a944409d57e87c79149224fe61b4e464cc013b0e7c2f48bd05146341a1879712c4b93
-
SSDEEP
192:sJR70XXao+tHEC41D8e3P6ktDOp+4FmIWfM4Wl:+N8GkZtNtDcPvWfM4W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order 6270-23_pdf .exe
Files
-
52e7982d1590992890ac62adf827259751a75238e3b58c6ad44802a525e7e6e5.iso
-
Purchase Order 6270-23_pdf .exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ