Static task
static1
Behavioral task
behavioral1
Sample
Purchase Inquiry PO_20248099-1 12,300PCS.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Purchase Inquiry PO_20248099-1 12,300PCS.exe
Resource
win10v2004-20240802-en
General
-
Target
4491ab2dd10abb8f8b32f24d5e8f71ec78b8bf9ca99b99f8b3d02e71a37a8117
-
Size
648KB
-
MD5
7058cf1abb1b00cfe62a900a5e0c5332
-
SHA1
c45f2606499917a7f643795a66b447e9b0e1c4fe
-
SHA256
4491ab2dd10abb8f8b32f24d5e8f71ec78b8bf9ca99b99f8b3d02e71a37a8117
-
SHA512
f0fbcc60ad490509d94ff3694444325f5f76f5cb9d377b4aa79b2cc21cec904301701c714d6e458305ec63f70be783583006587f0fd241a0f8073209497e5204
-
SSDEEP
12288:ty5eagr8JfrCkWkv2lQrruF5wagF3JJlPkSwx95KiC/r:tyAtRkWkegre5waevlPkSwoiy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Inquiry PO_20248099-1 12,300PCS.exe
Files
-
4491ab2dd10abb8f8b32f24d5e8f71ec78b8bf9ca99b99f8b3d02e71a37a8117.zip
-
Purchase Inquiry PO_20248099-1 12,300PCS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 736KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ