Static task
static1
Behavioral task
behavioral1
Sample
PO00140263-Order .exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PO00140263-Order .exe
Resource
win10v2004-20231222-en
General
-
Target
1faa81744e1fda1a35fa2490a772cc21feb9bee8ef5d616b6d847a58830507fe.rar
-
Size
15KB
-
MD5
6e72b334659ac5eb5d24321ecfdcee42
-
SHA1
9798548e1b57d6ad5772c168bc7ce4f88fa18c30
-
SHA256
1faa81744e1fda1a35fa2490a772cc21feb9bee8ef5d616b6d847a58830507fe
-
SHA512
6eaeca1197e8904010efbafa0f9c51a459d8efd34cee949738d603d2702f4ae35e316e7cd733c36ca8a3e77be20a141440b7215946f45c8a61372cacca68e24a
-
SSDEEP
384:RF4uxkEn/dnUk7LVoYcdy/SznFHsBkgRWAvhtYIR/0LVU:X4uGEZUI2tKin8kO9vPYQG6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO00140263-Order .exe
Files
-
1faa81744e1fda1a35fa2490a772cc21feb9bee8ef5d616b6d847a58830507fe.rar.rar
-
PO00140263-Order .exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ