PurchaseOrder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PurchaseOrder.exe
Size

614KB
MD5

9d4d4f1df0d4d77b94b4961d5a501607
SHA1

49e39601938fc60cc3d98653253924f39004c3ee
SHA256

a0bd73f38df0f20211cc2308c54c72628d551f4f985e02d9c54e35b98e7a70c5
SHA512

04391b5058c6ec5bf2dda9bc96fe6826c8cc9945a7bbf420624e180427f69a97101f1459a6089de4f5c9efe5f8b0b72d60e25f3c8238adce9ff66dd6a916fdb1
SSDEEP

12288:bslS5WFmtMhhg8fY0Hr3E+WdgAMo0VPB9UUeHWpcRHoOJRYWq:Q2W/p3bWdS7VbZeNaOJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PurchaseOrder.exe

Files

PurchaseOrder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pJcH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ