Purchase Order PO[.]exe

General

Target
Purchase Order PO.exe
Size 813KB
Sample241202-spk97svmfm
SHA256 1d2af4792048076fca7173a17292b2ec656cc778e346d4ffd4cdfd59934f6c3c
MD5 cb1a03a8078cf32ccd5183f53e8e0c86
SHA1 f51759f63438c530bec1a9911bd0efd2c61ea97c
SHA512 c30d2edba6c0cd15a9d3b8f9198d67ca6a5ab97be7c041f7005a436fce9b9477ea68285e329db5958043824c10bc8dd873d3e447caefcce8519c6c3124d307c9
SSDEEP 12288:gzC25usx+XtEzReswe8WJkAgNbi054lNG4ir3zM6R/RyME9iI8+Sr0b0WHXF+:0xzpwlXbzoNG4ir3zM6hQMRInSrmX3F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order PO.exe

File Explorer

Purchase Order PO.exe

.exe 813KB

Purchase Order PO.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1d2af4792048076fca7173a17292b2ec656cc778e346d4ffd4cdfd59934f6c3c
MD5 cb1a03a8078cf32ccd5183f53e8e0c86
SHA1 f51759f63438c530bec1a9911bd0efd2c61ea97c
SHA512 c30d2edba6c0cd15a9d3b8f9198d67ca6a5ab97be7c041f7005a436fce9b9477ea68285e329db5958043824c10bc8dd873d3e447caefcce8519c6c3124d307c9
SSDEEP 12288:gzC25usx+XtEzReswe8WJkAgNbi054lNG4ir3zM6R/RyME9iI8+Sr0b0WHXF+:0xzpwlXbzoNG4ir3zM6hQMRInSrmX3F
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

832426

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Purchase Order PO.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order PO.exe

mscoree

dotnet