Static task
static1
Behavioral task
behavioral1
Sample
Drawing specification and August PO #07329.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Drawing specification and August PO #07329.exe
Resource
win10v2004-20240730-en
General
-
Target
02082024_0141_01082024_Drawing specification and August PO #07329.tar
-
Size
614KB
-
MD5
fa55cc95871ada0680d3533176c9c4d1
-
SHA1
a5e97f325170031c4fc9bfc61b2ace75ae0bc002
-
SHA256
2f80eebf8256dec4078950940838b6b2faab72cb9f7897f50465b2a24abf7fbb
-
SHA512
683b18319f848862a04233e07f15fb4bafb83376f91d262992e69a50e3eae4de0b12952a99dcde3fdde41ff38f55c6ea4905307b7a6b14bb0dcc3035787b92e7
-
SSDEEP
12288:06TXwgIzPcq0sm6HOUxf8Jk+qTAv45FIhG8yyKzYF5FS:7gbzEo/uNkdKYFtI3Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Drawing specification and August PO #07329.exe
Files
-
02082024_0141_01082024_Drawing specification and August PO #07329.tar.rar
Password: infected
-
Drawing specification and August PO #07329.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ