Static task
static1
Behavioral task
behavioral1
Sample
New Purchase Order-030220- SMART SOURCING INC.exe
Resource
win7-20240221-en
General
-
Target
765642849.eml
-
Size
745KB
-
MD5
28bb017d32b31fd39912bdaeeaa12dd7
-
SHA1
5bee520885eac7836178a39534502d5acf4d0414
-
SHA256
6fd0a8b6756ea581178663723602b4b9e28c6f83d04e0d890c0294986d8de1e9
-
SHA512
1258a001df4c92321a9c58b114339a578a9ea22bad2701cfc736d634cbec6442a5ec25a6722120a11a2ecc7b6a7a44d7ff3463e85d9d70dae4d1e7d08bf14983
-
SSDEEP
12288:464oqhIyNM1IuZFwi4YKEz5ZdNewH6SIxFLS/50is9Hhg6/rKhIx1GxAXs1ic:FWhIufu147a5ZdN7Cw5/ohrKhd/T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New Purchase Order-030220- SMART SOURCING INC.exe
Files
-
765642849.eml.eml
-
https://youtu.be/gW_J_Ju7x-w
-
https://www.smart-sourcing.com/contact/
-
http://www.avast.com
-
-
New Purchase Order-030220- SMART SOURCING INC.arj.rar
-
New Purchase Order-030220- SMART SOURCING INC.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
attachment-3.gif
-
email-html-1.txt.html