Static task
static1
Behavioral task
behavioral1
Sample
Automate Purchase orders88777.scr
Resource
win7-20240215-en
General
-
Target
76d52e7cebd696a4f8b379cb2737ad8b160d6bc688d833dd6fef2e0864d611ed.7z
-
Size
661KB
-
MD5
4b241ba692cf4d44e9276e4d6eb43520
-
SHA1
1b2af0cc438ee6b52c68372aa4f8142cc9a2a3ab
-
SHA256
76d52e7cebd696a4f8b379cb2737ad8b160d6bc688d833dd6fef2e0864d611ed
-
SHA512
b2da3b29e4e0d211af635113e84bbb9396ec8ca2e0cbafb7e1d9ab7874eab69db729464684c49eeff06038cba118b936710068e626f8b2f78608ef5138edbdfd
-
SSDEEP
12288:+NhULNGJkqUKz9ZQ7mSeeN4fWgNaYJaXpTLsvreklr7nNMEnS2/2JcRda7pZX:WhUUJkqp7umqefWoJvyyrb2EZ2JcRdcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Automate Purchase orders88777.scr
Files
-
76d52e7cebd696a4f8b379cb2737ad8b160d6bc688d833dd6fef2e0864d611ed.7z.7z
-
Automate Purchase orders88777.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 781KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ