WEoj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER-6350.exe
Resource
win7-20240708-en
General
-
Target
PURCHASE ORDER-6350.exe
-
Size
831KB
-
MD5
580cd9b274ea0351f4464bea51560e87
-
SHA1
84d3a301f50ec248d1209bfb0ecaf98eb329a9aa
-
SHA256
8b528f3a173e7e40394c21bb0cfa0304ef12b58ab185de1da8e4b4e5231eee8a
-
SHA512
2798587540ce8b78ba6a64b0d4635ae517879e1ef742506acf74c16fb77555fd3b701a3a290be5123ec32c39b66353494588157e965f9a2a51fe53ff65fcab1e
-
SSDEEP
12288:32M44SGRPuRKJU/A46eaIZBJBgaP6ubf6wnaLGCTxuKci/7N5:C9uPucK16Eo66uD6wyFuM7N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE ORDER-6350.exe
Files
-
PURCHASE ORDER-6350.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ