Static task
static1
Behavioral task
behavioral1
Sample
Purchase order 4500640396.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Purchase order 4500640396.exe
Resource
win10v2004-20231222-en
General
-
Target
58dfedfd07f483038b5a9ec74ca4d520
-
Size
632KB
-
MD5
58dfedfd07f483038b5a9ec74ca4d520
-
SHA1
d134fea4210a897d050884da1477ccc5aefff456
-
SHA256
1252ece51a29bff6dcfb78a28d430228b3083b529e2212e17482577e49bba034
-
SHA512
0fca6f1850e59ccf7d5df32c05381682b6ef21bdd9aa95c00e1be61394f4e472d2d32c304679cdf84d1c482a7b580c45f0c0ed227f5e22ed3f20481e2f79f5ef
-
SSDEEP
12288:/kWxIZSZXc6toMbvk9u4vhyk+h24L0oT2fkLEdHWAI+Muz2P:9ASZ5Y9ueHK26ioFArze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase order 4500640396.exe
Files
-
58dfedfd07f483038b5a9ec74ca4d520.rar
-
Purchase order 4500640396.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ