STRy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20250314-en
General
-
Target
f5c545c35d36074f461f765f34ba274dae1e12eabd4c050f68641fe3944ba7fe.rar
-
Size
522KB
-
MD5
a1ca14f7de4f8f40186f3a75e6494937
-
SHA1
2d5ae4659702824896c243a69fb9dd7b8c6710ca
-
SHA256
f5c545c35d36074f461f765f34ba274dae1e12eabd4c050f68641fe3944ba7fe
-
SHA512
6df4fccb4e396e489bc264cd4a7cb0da5f6404554ae8339e029d77c8d5a8818e9b0051cb8a018d9cdb5d829d67b42029c9c48defa1a76375992e05867290755a
-
SSDEEP
12288:IasIgpJ4cc6oPr9M8KEkjg/djL//nWW9+PzpJPYDkABn8t:VuL7K68nB2xvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PURCHASE ORDER.exe
Files
-
f5c545c35d36074f461f765f34ba274dae1e12eabd4c050f68641fe3944ba7fe.rar.rar
-
PURCHASE ORDER.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ