Static task
static1
Behavioral task
behavioral1
Sample
New purchase Order.exe
Resource
win7-20241010-en
General
-
Target
1a2b69e124bf6f1e5abe064752e77297722b9893307710e63c442fadc9a5e08f
-
Size
500KB
-
MD5
870490e556f622f10d304ddbfeccd79b
-
SHA1
6734bd66fb6e6e63025b754d06d36d8916fd03a5
-
SHA256
1a2b69e124bf6f1e5abe064752e77297722b9893307710e63c442fadc9a5e08f
-
SHA512
e95ef4ba64b44cd865617f568dcf3a341652ae107125076f3925a93999eaa85a6ba539818a2732cb599b307484b75679a406905782166118b00eb61379de6784
-
SSDEEP
12288:h03nNW96KKMCBfescIUuP5GHBasDT9NRsfACqSFriawmO:Ck+MCcsten8ApSnwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New purchase Order.exe
Files
-
1a2b69e124bf6f1e5abe064752e77297722b9893307710e63c442fadc9a5e08f.zip
Password: infected
-
f52a714280f14ecadd8e2cf1f396bfef8277ec53fff0c2afc18b7cedbc745d54.rar
-
New purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 884KB - Virtual size: 883KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ