Purchase Order[.]exe

General

Target
Purchase Order.exe
Size 533KB
Sample240404-kceynaac71
SHA256 191239a61c70ba900694d294a164f4a162b84d11672871fbb5389967bbf52c7e
MD5 654c1586b15a278983493f57f72cacb7
SHA1 5b6df8769764505ffdb7691ac2150d4327eb8104
SHA512 0261b627ed3e545a73868d559497fe44060fe9f62e98f6abd1b315c76461fd923e15eff017071d4c3670acd46e79aa4d6c5b0779a3005a1dc414007bd3b2264f
SSDEEP 12288:oBUHz1PozcOXiblkQN6gK+papl9P3oZihQbQXMKPDq:oGHzqBaiG6oaP9P3SihQb0b
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order.exe

File Explorer

Purchase Order.exe

.exe 533KB

Purchase Order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 191239a61c70ba900694d294a164f4a162b84d11672871fbb5389967bbf52c7e
MD5 654c1586b15a278983493f57f72cacb7
SHA1 5b6df8769764505ffdb7691ac2150d4327eb8104
SHA512 0261b627ed3e545a73868d559497fe44060fe9f62e98f6abd1b315c76461fd923e15eff017071d4c3670acd46e79aa4d6c5b0779a3005a1dc414007bd3b2264f
SSDEEP 12288:oBUHz1PozcOXiblkQN6gK+papl9P3oZihQbQXMKPDq:oGHzqBaiG6oaP9P3SihQb0b
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

551202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

EeBu.pdb

Purchase Order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order.exe

mscoree

dotnet