Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE_ORDER.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PURCHASE_ORDER.exe
Resource
win10v2004-20240709-en
General
-
Target
PURCHASE_ORDER.exe
-
Size
2.7MB
-
MD5
b577dfdff6aa26f7e6c1e716705f85e7
-
SHA1
251a73ece1b52bdcc111869c52ac425b12f2e171
-
SHA256
91621325314ba84b27d67d107dc55824bdbc3a0c2bc95dd904abf81af85d9ca4
-
SHA512
40aab5a3ea5e0bc6676fefc82dc55d4fd154adca61104312cb26aca6b11956458ed01f15bdbeed9e2dac9cef7028869862d54e0adfa8485a1c8d3b8cc997cabc
-
SSDEEP
6144:KQQ1cZC/gCMR6kdngNzSlv2Fg7CO8SmdUwNc7DSPXj/cFQdfIbYjvmlfOZGDL79k:jnZw3MITDSwFNNc7oXjUFQdP8f79w20
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE_ORDER.exe
Files
-
PURCHASE_ORDER.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ