FbHG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Purchase order.exe
Resource
win7-20240508-en
General
-
Target
8c316e585ae6eca25662de6cabe7d047e5f0f9630c8331d1565345347b8c3395
-
Size
593KB
-
MD5
09cbc4835c7a2bb7fb95f83e25adb67e
-
SHA1
3f1fbcfc28a2cbe8f95361d54edda864b8ff2fff
-
SHA256
8c316e585ae6eca25662de6cabe7d047e5f0f9630c8331d1565345347b8c3395
-
SHA512
f5149aa64e01ec1202ab8bafa3dbde7d5357e4226ce7a02c3df8013dcf25960f0093a58f7a95de30722f4f54f77d6d38abd23ee949c61bc0c68d8e3f6cfc4ecf
-
SSDEEP
12288:IjxILvzD6w9Vc6unco29EecKni8oMzkEx58pHlNGqw9oTyzy0:QMD6ye6McDUT8yyyWJ9oTd0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase order.exe
Files
-
8c316e585ae6eca25662de6cabe7d047e5f0f9630c8331d1565345347b8c3395.zip
-
Purchase order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ