Static task
static1
Behavioral task
behavioral1
Sample
New Purchase Order-0304243220- SMART SOURCING INC.pdf____________________________________________________.exe
Resource
win7-20240708-en
General
-
Target
8cbbbbc1432a5368e903073e28c54603.bin
-
Size
394KB
-
MD5
12181f8199a7570dc7efda015bba93f8
-
SHA1
ffe3bc16028aac9ac2f8dddcc8f0977256fd0db8
-
SHA256
dce9a2540095326097381b7609b1f5a2481a3cd9f7089c4a65d42a1b9a2378b6
-
SHA512
6f423520998ae7338e0b23fb0a8320d0be3a6f66eb4caa0016b221199aded0812dd1dd108415777f6509a9089adb26c8752ebbb471c5dddd73f8d6ffdbb34ca8
-
SSDEEP
12288:2AUu7HHoG/38pPGOXrUijz9EFLMscke62t:2AUuDoA3wPGO7Uuz9EyLt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New Purchase Order-0304243220- SMART SOURCING INC.pdf____________________________________________________.exe
Files
-
8cbbbbc1432a5368e903073e28c54603.bin.zip
Password: infected
-
035f44415228a4f73d1aab1a7f3ff75b8138f2b093586b49cf4faef32587863b.rar.rar
Password: infected
-
New Purchase Order-0304243220- SMART SOURCING INC.pdf____________________________________________________.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ