Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20231215-en
General
-
Target
99e991f272db9b3f1e786cddb68e69460074a1a49cd4262105982132bfcc6dae
-
Size
700KB
-
MD5
98476b3881081f384c3922d54f84dbda
-
SHA1
f680ab74b0a0d33e4d418a134617c449308c28f3
-
SHA256
99e991f272db9b3f1e786cddb68e69460074a1a49cd4262105982132bfcc6dae
-
SHA512
891c1832706dbd33af4ce812d20f8ca4d343a35a07967d95504368dff583d053f9b33d1e1d08f1211646b990753258703200360a01db6e54914fb964a3f4f829
-
SSDEEP
12288:IB6KIYenllt/8RuBJEGTWbSU0QN5Qd7mOp9Bu6PB/fjfYDjI7GEMTSM:Ih7evSRK2GTySUlQdSOplB2qGEM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PURCHASE ORDER.exe
Files
-
99e991f272db9b3f1e786cddb68e69460074a1a49cd4262105982132bfcc6dae.zip
-
PURCHASE ORDER.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 733KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ