New Purchase Order 25051643[.]exe | Triage

Sharing

General

Target

New Purchase Order 25051643.exe
Size

997KB
MD5

ccc056c533979eacb9089e27c5b24518
SHA1

d85d5e3540711d86bcd798f74b6fd68deb100a8e
SHA256

38d45a0e0f376be174d788c93424ef4724daad94ce4139beba1868a36d8ad47f
SHA512

e2c8181bbddf2f7e391d391e0e253beb0472950ef58e371a699b4b24f471c287f14146530bd45e79e0f6d78eada493c522e7e1c55eb207ef5c1735eca249cae2
SSDEEP

24576:9aj8qIR12+0LufeamU7DoLyo5yViQkZmSXwVtJ:RkLUnno5xQkQTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Purchase Order 25051643.exe

Files

New Purchase Order 25051643.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

xcPX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 995KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ