Purchase Order5479978[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order5479978.exe
Size

1.4MB
MD5

7a958b12ec479cf577a497ba886ff2db
SHA1

fc39d13a76c95a0fd64a285ad58bb39493d0f822
SHA256

95795debd73d196c102bd84045217c265995f03a5436cc61f9ed90035ad7f977
SHA512

fdc033e0e71a3b044dd3adf34aad21396dc76d3dbe82310670e5eee140a4da6f07ec9d858d2bc44745c2d37f0cc3ccaf1439e80d7897263362e1987542bce098
SSDEEP

24576:CjADhreCPc2YDv5Oa/dkuS76QZWxSOFPP1Rz0zJaP+clh4OTkdDX4B:CjADhresmOuS/WD1RzXWclVwdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order5479978.exe

Files

Purchase Order5479978.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ