Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20240802-en
General
-
Target
c4a852d85ff37c57045cd79d2e21d3ea1325fed90116ecb513997b945fac9b42
-
Size
482KB
-
MD5
072c5c9749c79c52f3ab6a37714b0e03
-
SHA1
f9dbd3c98314661c24d83b15363618395121c350
-
SHA256
c4a852d85ff37c57045cd79d2e21d3ea1325fed90116ecb513997b945fac9b42
-
SHA512
48c59fe1d5bc63fcee7f462cf5697cb8d97618896afec50051bbf3acc4b3c5e524896dd5fc47d4825313a54634d6bdbccd3d09238fe6e8eb6a52c055ce89aed0
-
SSDEEP
6144:mQgxqaghBeICoKWK5knPg6S6vO8PtJerB0s4VHr4DDZJCLaROplLaKLWsQLkr0:mBwayjVKWxOotJerBC4DbyJlLa6bLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Purchase Order.exe
Files
-
c4a852d85ff37c57045cd79d2e21d3ea1325fed90116ecb513997b945fac9b42.zip
-
Purchase Order.rar.rar
-
Purchase Order.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ