Static task
static1
Behavioral task
behavioral1
Sample
Purchase Contract.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Purchase Contract.exe
Resource
win10v2004-20241007-en
General
-
Target
200b44430ea0ef05c0a7162928602b95e4526633ab9f5bf79a8d41bf940a08d4.z
-
Size
719KB
-
MD5
b59c47c6241303133d46d29b9e447f26
-
SHA1
070396ba4c9934184d0e81d5e766a1756761e29b
-
SHA256
200b44430ea0ef05c0a7162928602b95e4526633ab9f5bf79a8d41bf940a08d4
-
SHA512
54ed6e56e76cb6e39c1b874529ff5580883793a522c2969aa76fed8a68a78b17d11a839d46e3a5c5ad8b16fc6460900cd6280e0e845c5b30d1da22b663272c77
-
SSDEEP
12288:LTwFz3+8beNIel+zAOGDtDr7sDUiDy+leWNWBANRn1Irmy4dNw3mUxI8cmZQZ3xU:PwlvSOelI9G9wIiDb0BWnurmy4TOAmZT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Contract.exe
Files
-
200b44430ea0ef05c0a7162928602b95e4526633ab9f5bf79a8d41bf940a08d4.z.rar
-
Purchase Contract.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ