UtzU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER 794769-048.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER 794769-048.exe
Resource
win10v2004-20240226-en
General
-
Target
d80313774b5f4bb077f82036f1bad8f0.bin
-
Size
860KB
-
MD5
97f5d812ce51dcc9fd9448c881f83445
-
SHA1
93e9aa26fa3008871db639c02cd88d05db248466
-
SHA256
a27680b43e44f22ceacebab92e9564510f67b4a90ffcbc62b0c601f696ad5fc0
-
SHA512
9423cd6b501b89f7327b687087fc7dfa0a3455514b9b1de88e6b01cdd6dc454d5df07db91f0d1d21a54d511e3be7abd227045781b9a28cb3d9ada8b14ee4858f
-
SSDEEP
24576:uxC/m9b8hM2iMUs+nNW7krBCXawDL72ursQvtCKaE54:u5oLPUs8W7pXawj20smQ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/PURCHASE ORDER 794769-048.exe
Files
-
d80313774b5f4bb077f82036f1bad8f0.bin.zip
Password: infected
-
194ea65835a04037b8894baa10eb00e1b2d64067de99cb22badf5ea80fad3b41.gz.gz
Password: infected
-
PURCHASE ORDER 794769-048.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 889KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ