IoQQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order Specifications 2024.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
Purchase Order Specifications 2024.exe
Resource
win10v2004-20240226-en
General
-
Target
fb7e3e941caa92ea4f931356a638868f2e355c65c19cd3c49bd1c00b09a9907b.img
-
Size
1.4MB
-
MD5
3e39be7dc9401370614c4e62cc56bf9b
-
SHA1
bc1509003375c4f4a0311e08879848c135b7b2c8
-
SHA256
fb7e3e941caa92ea4f931356a638868f2e355c65c19cd3c49bd1c00b09a9907b
-
SHA512
2690bab6cc8fc88f10a0ffeaff49eac6cf88604ed313783685e43c164be0fd23ae69fe30a48b68f3dc0a32683beb74be85274323ec0a68d507eb1d672d4a53ee
-
SSDEEP
24576:mg5HJmx9NoiP7+J7v8Dlco1AtasmkDu13xXD7:fJmx/7zYv8BJ4a1kq1R7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/Purchase Order Specifications 2024.bat
Files
-
fb7e3e941caa92ea4f931356a638868f2e355c65c19cd3c49bd1c00b09a9907b.img.iso
-
out.iso.iso
-
Purchase Order Specifications 2024.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 888KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ