Static task
static1
Behavioral task
behavioral1
Sample
purchase order.pdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
purchase order.pdf.exe
Resource
win10v2004-20240226-en
General
-
Target
purchase order.pdf.z
-
Size
550KB
-
MD5
6fdff0070826b75f24e61cf3a1fafc1a
-
SHA1
8f6510eda6fec2d0726fabb76d02fddf877e0eb9
-
SHA256
7ed1a12db1fb8cb66fb17645cf09aa0acdb14276c16fae3fa7729f8540e759fe
-
SHA512
4e03a5039a3584ef43324e1594c3e063c64d16c1e4e35c6355d6e2804322c90cab71a8a7495dfa5aed40b0c831c5c57f890aad84c81e0e17bc657df33f7efd57
-
SSDEEP
12288:lq9Y7kE3pNAWBZlTEu4BbP+Zm+TTb0rX8So+lScl3naw7bRWqwr:lw8jHB8u4BbWFj0rX8L+lXNa0sq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/purchase order.pdf.exe
Files
-
purchase order.pdf.z.rar
-
purchase order.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 875KB - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ