zJGj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Inquiry_002.exe
Resource
win7-20240708-en
General
-
Target
2ed5e08904545beef35a09a2be25b45215218b8a4e7d5f9711125f92d8b86a6f.gz
-
Size
861KB
-
MD5
ec24fd3d2c63f4c5eb1013fc10ec44ab
-
SHA1
aeb58eeacf56684b9cd2598d02b099191a427930
-
SHA256
2ed5e08904545beef35a09a2be25b45215218b8a4e7d5f9711125f92d8b86a6f
-
SHA512
2c53850d19a23f3bf8a5e0d9c0cadfe60efdf693ff7c2b808db2d7a437def6e936dfb92a6a0c135435712a26817bbc8e779437bc885e7e658d4746ac501f53de
-
SSDEEP
24576:EHJ9rEhUt9Mqqr++XBD0v2kujqw/Hj+136FZ9OLSEg+rIl:eghUtKqt+XhUx3w/HjkEiLSyre
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Purchase Inquiry_002.exe
Files
-
2ed5e08904545beef35a09a2be25b45215218b8a4e7d5f9711125f92d8b86a6f.gz.gz
-
Purchase Inquiry_002.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 890KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ