Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order #400610-PDF.rar
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Purchase Order #400610-PDF.rar
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Purchase Order #400610-PDF.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
Purchase Order #400610-PDF.exe
Resource
win10v2004-20240508-en
General
-
Target
Purchase Order #400610-PDF.txz
-
Size
591KB
-
MD5
642fc8c739e0fcce028a2ce57b60c3a0
-
SHA1
6cd382c9d3223e46c7d77b51f843cde18adebd18
-
SHA256
ac363a9734d32617dc6cee08c3bc0b072d74a48df7fd0d598060b02f1d6fdb6c
-
SHA512
360a1e1ea0ea3886c0623dae8c56e608253af15840ae5bc882502e2f7a2d2b35938c6499c60ef0472a2c68e23ba1ad5a368dab45fb0e287519522d5f171f1c89
-
SSDEEP
12288:+0Bb35MLM59ijugo/sr+w9rk8HNRyQSdj6MlcYjb6LK:J5+M59ijugoNw9V1ipGYjbp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order #400610-PDF.exe
Files
-
Purchase Order #400610-PDF.txz.rar
-
Purchase Order #400610-PDF.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ