zhmO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
采购订单 - 紧急14052024pjt付款.exe
Resource
win7-20240221-en
General
-
Target
f838adc154abda3b4f60796e71e1495a54fadcf8783d0fe046ade3e3df31cc37.7z
-
Size
669KB
-
MD5
92dd87473899c18e7262e9118163f434
-
SHA1
b2237f523c141cb6d0870d0a27133b4337efef93
-
SHA256
f838adc154abda3b4f60796e71e1495a54fadcf8783d0fe046ade3e3df31cc37
-
SHA512
ffc387a4cb3d642e7090a5aa51278b3dc70d76be32de933559fba694721da3e56265ec6a9ef18efcac1c751553b16ba34ff9f204874fe16e9c82e69833f95334
-
SSDEEP
12288:ctTxka6cgQPYV3HLlquW5F6CN66syqAKi5oHE/AhcsRZDzRowXb7FmHb+VIw7GuS:c8BQAHhquW007liN5Vzq+/6cW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/采购订单 - 紧急14052024pjt付款.exe
Files
-
f838adc154abda3b4f60796e71e1495a54fadcf8783d0fe046ade3e3df31cc37.7z.7z
-
采购订单 - 紧急14052024pjt付款.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ