Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20231215-en
General
-
Target
f3bb96310f7f219229418c413710bd139d3cfcd5154edd6214587a357b04bba0
-
Size
21KB
-
MD5
2534bbc6ca86b9b05556e1cc62c03f28
-
SHA1
917fc1551f812030b6af64dc437f0cf2c05356e4
-
SHA256
f3bb96310f7f219229418c413710bd139d3cfcd5154edd6214587a357b04bba0
-
SHA512
a4a01c1c8dd2f6ed9a6d1dc77c4d7212240c2e7a756bfa559a789c41e9a9979e85b8e4bb25d5a26fcfc093ad9104e8c81f578a7711cc8b0d623965a9a1de4ff6
-
SSDEEP
384:zAZD+VKxo7s/jRTtqok0/i2tlS3BUOJRqDHGkKXbK2qVOEkMcMPCGoqwn6An+/ZP:clJxn/RFLi2to+OnqDH0XbK2qEEkMKGz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order.exe
Files
-
f3bb96310f7f219229418c413710bd139d3cfcd5154edd6214587a357b04bba0.zip
-
Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ