yLtU.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order 194960.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Purchase Order 194960.exe
Resource
win10v2004-20241007-en
General
-
Target
db4c9f78490f0152cd750980db402d610c42157e240faf1287d84ad3e5d9026b
-
Size
525KB
-
MD5
9a3b83590f7ebc979c46a2aafaf2f9a9
-
SHA1
92fad03448c21c20d434a79966d893648ce84875
-
SHA256
db4c9f78490f0152cd750980db402d610c42157e240faf1287d84ad3e5d9026b
-
SHA512
cb6a1a5107367e0917bd5d18a5b12febade79a2252b23d7565120fd547f4aaa1174f066454663f964ced4a5a14bd3e1a71a521a1eefcbcc3be353b46d6580867
-
SSDEEP
12288:kSb9s5BGj/xAZlBxlDhjRL3TKgKaqJIM7mpFbcHvB7kc2mk5:b9o8j/xArB3FjRL32gKXmpc1v2m4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order 194960.exe
Files
-
db4c9f78490f0152cd750980db402d610c42157e240faf1287d84ad3e5d9026b.rar
-
Purchase Order 194960.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ