FxCP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
LEVERSTYLESEPBUYORDERC248SH12.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
LEVERSTYLESEPBUYORDERC248SH12.exe
Resource
win10v2004-20240802-en
General
-
Target
LEVERSTYLESEPBUYORDERC248SH12.exe
-
Size
806KB
-
MD5
9a32e03e7274d1b2eaf10e14daaafb91
-
SHA1
159074cadc6851dfc72ad44bbd0a187198b38896
-
SHA256
8ef13cc6f1b7142f119d90c5bf9a8e8a4ef30e0151191a9f0e0b96610d8fe183
-
SHA512
9bd7319500eed20b6d9736ac9f982ed88d0ce1b0d48f936f9d95e69abe1c9e11e86ad2a495c2b645e65a2d5abc6589116543d8210511698248e53332c9a4f11d
-
SSDEEP
12288:1tWvtO3X2CZ8dDN5H8emRLS9VkKjEbSkNzFduuZEkgArJjtXHX:wO3GCG5N5HSuke4zF9EkzrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LEVERSTYLESEPBUYORDERC248SH12.exe
Files
-
LEVERSTYLESEPBUYORDERC248SH12.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 642KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ