Static task
static1
Behavioral task
behavioral1
Sample
PO Number - 9201000 - SOA - AUGUST END.exe
Resource
win7-20240708-en
General
-
Target
5919da35e7eb282a2e349c1846674797.bin
-
Size
672KB
-
MD5
62b42fa270ef875e01c059405f2de4e6
-
SHA1
c7ddd8539ca7224a6ac8a9fca9953e90d4ae5806
-
SHA256
f15cbe7b2db3d2653e9d1cbbfe269869eb38551529d1a9b481d429b6fc2a1735
-
SHA512
f5598e1478f426d4d8be9afbcbf499cbf2b58b78b1240b59dba8debe53b23abf8d7e142f7b75ff352e487ec94ee9b6cbc6126591b8ad1f790a89fe8f01258558
-
SSDEEP
12288:er+mACLUNEwJ70iYedXOZ6DZjdlIoOL5wT8yq0SZuCqRcz7rVb+d4dhBvP+czb8O:er+mAvvJ70iz+yxdlInL54hq0uYcX5KO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO Number - 9201000 - SOA - AUGUST END.exe
Files
-
5919da35e7eb282a2e349c1846674797.bin.zip
Password: infected
-
7572961058f1ddd7bd4963fc730ec6a2fa5edab3510dcac746534115c78c518f.r00.rar
Password: infected
-
PO Number - 9201000 - SOA - AUGUST END.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 703KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ