Purchase Order[.]exe

General

Target
Purchase Order.exe
Size 686KB
Sample240320-rdtxjaab45
SHA256 883c03eade18d7b56edf9b057f55d4976ba31c2557aaf583197e3ca9b2d8a775
MD5 6c5eed852574e66e9dbd0f967e88ce66
SHA1 182bec3dcb6e00e561bcba23ca23104df7701ee5
SHA512 8a5194c58ba03ad9dd51bbb6f270e28fed4d04bcc813ecffc978adbae7dd4be40b4b56992a53c39e803b3d0a40bcae9f84f30bbd2d37b0c6ee2f9ac48767b9c6
SSDEEP 12288:xiUqaAxN1kz0MbXWpWvP+ym5R3j5Ecw7amZ06x8Zqh8/B55MzapwjAeOBA:xiUqaAxN1ZIXaWXNcw7j0ve0BzMzYEAU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order.exe

File Explorer

Purchase Order.exe

.exe 686KB

Purchase Order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 883c03eade18d7b56edf9b057f55d4976ba31c2557aaf583197e3ca9b2d8a775
MD5 6c5eed852574e66e9dbd0f967e88ce66
SHA1 182bec3dcb6e00e561bcba23ca23104df7701ee5
SHA512 8a5194c58ba03ad9dd51bbb6f270e28fed4d04bcc813ecffc978adbae7dd4be40b4b56992a53c39e803b3d0a40bcae9f84f30bbd2d37b0c6ee2f9ac48767b9c6
SSDEEP 12288:xiUqaAxN1kz0MbXWpWvP+ym5R3j5Ecw7amZ06x8Zqh8/B55MzapwjAeOBA:xiUqaAxN1ZIXaWXNcw7j0ve0BzMzYEAU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

702514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Purchase Order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order.exe

mscoree

dotnet