Static task
static1
Behavioral task
behavioral1
Sample
PurchaseOrder008945pdf.bat.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PurchaseOrder008945pdf.bat.exe
Resource
win10v2004-20240426-en
General
-
Target
PurchaseOrder008945pdf.bat.exe
-
Size
670KB
-
MD5
90867c0373fb279f9f2f5ed4c09cb614
-
SHA1
f4061d8d89307006818bebf0de6964668df193d2
-
SHA256
1875ff6ba9beda4d257cdd4ef68d2e51ceb10acf2d15493d7362a29cc743c545
-
SHA512
995abe088287810a49168c75238dc2bfda604c640610c23ea535e0516a2606a11fe210732ea4ac661f90d6c7b653410593267c3b877fe01cd218c4578423d704
-
SSDEEP
12288:TJ7Ci2F0DCuI5bBl6XJef6J665C+KqGUJM0Grtpoi4giJj/YwE56n:TJOis0DCPHl6sCI6k+KqrMPHJuJ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource PurchaseOrder008945pdf.bat.exe
Files
-
PurchaseOrder008945pdf.bat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ