Static task
static1
Behavioral task
behavioral1
Sample
purchase order # 3061552371.exe
Resource
win7-20240729-en
General
-
Target
810f464547c07f3f60a5e929eaee77406b0c6a964b46f441aa7471415aefc118
-
Size
414KB
-
MD5
afbdc204b082080dd6c7e97f10186c34
-
SHA1
8ca5b20aec6d3689b1266bb4f40ba98ed973b432
-
SHA256
810f464547c07f3f60a5e929eaee77406b0c6a964b46f441aa7471415aefc118
-
SHA512
e11ac3dcea9f2dae9da6a5814697b5e077a32cac042b650a6ecea09e70831fa113946fb94d302147a1a273e00d04e5e3595582fcefad84479581c925c36d0fc4
-
SSDEEP
12288:inyy2UH6AdmVY8EY4xWsEx5Mt8Jo1WiTabW:Qyy6AdmS8EfxWzzMehW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/purchase order # 3061552371.exe
Files
-
810f464547c07f3f60a5e929eaee77406b0c6a964b46f441aa7471415aefc118.zip
Password: infected
-
94279fb19c478254fee6c558202d61f53b1b662217e35d7528bbcf45ab0f64c6.rar
-
purchase order # 3061552371.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 688KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ