UtzU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER 794769-048.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER 794769-048.exe
Resource
win10v2004-20240226-en
General
-
Target
194ea65835a04037b8894baa10eb00e1b2d64067de99cb22badf5ea80fad3b41.gz
-
Size
860KB
-
MD5
d80313774b5f4bb077f82036f1bad8f0
-
SHA1
b9e2a3d31bb9a355e217b4ed1dffab82a1cb654f
-
SHA256
194ea65835a04037b8894baa10eb00e1b2d64067de99cb22badf5ea80fad3b41
-
SHA512
0b9e8f0aa1656c63c2955dfd6fe76eb34a831bc4b561bd61c6ed03b9de027fb7365e3f4da37f90fb366060a52dcf2f7fed7d6df4369fe222ca0c929bbdcefceb
-
SSDEEP
12288:hcZjNM2AHyOU9KXZSFGWyFfSYQ7G8fVb8U+ALapJ0qO0U0aMnIRpVoR3ZtphWlDM:sAHyH9U8cWySxJEid0XHIRp2R3Nib1Pe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/PURCHASE ORDER 794769-048.exe
Files
-
194ea65835a04037b8894baa10eb00e1b2d64067de99cb22badf5ea80fad3b41.gz.gz
-
PURCHASE ORDER 794769-048.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 889KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ