Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20250217-en
General
-
Target
PURCHASE ORDER.exe
-
Size
776KB
-
MD5
9c7a8eff3b37756a1929f49f3b3053e6
-
SHA1
8c71c99e38e7322e3b4713dbb4c232419ec6659b
-
SHA256
ae88fec8df2e320104325abf884d96a5a5248b174cb42351fe46bb2f43c99ecc
-
SHA512
4d5ef22923096b33a0a52b22a3d4df4a60bc114ddd8cf52f880b0f89121d11f8298ea7760549ab8bb44986b8c5411420124468af51bdd94eba4eb86df6bb339a
-
SSDEEP
24576:tMRHPv6tkVi6z7UdFzulgJ/85Q03OTTObeL8MRH:tMZqaVlUQgJ/4tmTB8MZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE ORDER.exe
Files
-
PURCHASE ORDER.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 724KB - Virtual size: 723KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ