idZp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20240226-en
General
-
Target
Purchase Order.exe
-
Size
674KB
-
MD5
bb27ed093c6e2c730c9474aa79ac2d29
-
SHA1
321a8af5f62eb08923ca0e0ca99de7fde052033a
-
SHA256
de5cf20e4077372593a8c24c31306b7e5b9ba62e3952609bde308300631c8c3f
-
SHA512
f8178da7f0bdbf165082e420c364c1a91718b7e09eccc0a9f5c10ab4f79420f455bbbda9533e4efb1fd20a201ce0fccfaecefb271daa4b4d2eda09d304f856af
-
SSDEEP
12288:dd0FtImAFJFiXpflU5Xnt9K4QRvePodWz4gjbbN0hYE38uH21qDfZDGh:bM61FaXlgXt9K4QIPoAUhYE3JHNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Purchase Order.exe
Files
-
Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 666KB - Virtual size: 666KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ