Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20240903-en
General
-
Target
6602dfc6463c1dd74eb915d72b6a2083275106a5ad507667099c1015a1a8a9f8
-
Size
483KB
-
MD5
690352aef690e6ca49d1fd0517d51c8b
-
SHA1
c9002e350642b67c4b9bad6aa5d46a778a799635
-
SHA256
6602dfc6463c1dd74eb915d72b6a2083275106a5ad507667099c1015a1a8a9f8
-
SHA512
af37af2260e18e8111a45aead792c12ff6e3bd5aedea14a311bf125bece0262ded736c4afa191bc3f0931e35f6936bb18026835b1b28931c23fd64c9915feab5
-
SSDEEP
12288:nH8cVZ3TsluuBdssAR1Y72le/H7WhYIKWyhDJrsd3:nH8cVlsluuYlrz0/b4YIslJrsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Purchase Order.exe
Files
-
6602dfc6463c1dd74eb915d72b6a2083275106a5ad507667099c1015a1a8a9f8.zip
Password: infected
-
8269d34c0ef1088a9c876c3a5312622b1ccb06921e9893b30829a48f2c9a0948.ace
-
out.ace.ace
-
Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ