Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20250217-en
General
-
Target
a71527b4ac58f6f9c2f7649b0be7c7b6ddb327f35ad6520dc1013f4b52ef6d3f
-
Size
650KB
-
MD5
ec1cd3300196f9ce14fb36fe13be1652
-
SHA1
1410f1e8937de6997bde2f2332b61a54ff29e613
-
SHA256
a71527b4ac58f6f9c2f7649b0be7c7b6ddb327f35ad6520dc1013f4b52ef6d3f
-
SHA512
f02c8e1242af20ef26ccae5a200cc4cfe65c73541584dc1039f0431eb60e675be647ffe656bbe823805778e8170852fd586ca3b227caee6903eb9dd1dc613d2c
-
SSDEEP
12288:gIlFyc5Ux91XdaAunyENLGwu2wFpZstcv/ZZs3IUdVTLbe8DvwYTOZIlHed:gIGuUx90nymu+cv/Ls3IUdVT3JDYY6ou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order.exe
Files
-
a71527b4ac58f6f9c2f7649b0be7c7b6ddb327f35ad6520dc1013f4b52ef6d3f.zip
-
Purchase Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 719KB - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ