Purchase Order[.]exe

General

Target
Purchase Order.exe
Size 760KB
Sample250326-hya6gsslz5
SHA256 c25af148d844a284434907e6a60abe904c462fa48fb7fa4ea145a435ab106afa
MD5 cb8016b4b94a30aad2b4ba92667b0cdd
SHA1 33ae23d77887702f3dbf72f9f6ae430eb2152754
SHA512 1a7d3800b6d16666e61cb24f52fc9dee6da74c78508a1e717ee0ab4f33d0f48cae988a260858cc71e9c7643b2836c7ba76e7731bd49655f80e44a14517845d7c
SSDEEP 12288:2u2iNczJ+Wnqn++0Kdpv9p9fr1Og0rlwdRzDQEg40Pio9z4b/YcRzeQWSILgQdI8:f1qzMyKdbpi9rlwdRzDVgDiV/tR41LgG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order.exe

File Explorer

Purchase Order.exe

.exe 760KB

Purchase Order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c25af148d844a284434907e6a60abe904c462fa48fb7fa4ea145a435ab106afa
MD5 cb8016b4b94a30aad2b4ba92667b0cdd
SHA1 33ae23d77887702f3dbf72f9f6ae430eb2152754
SHA512 1a7d3800b6d16666e61cb24f52fc9dee6da74c78508a1e717ee0ab4f33d0f48cae988a260858cc71e9c7643b2836c7ba76e7731bd49655f80e44a14517845d7c
SSDEEP 12288:2u2iNczJ+Wnqn++0Kdpv9p9fr1Og0rlwdRzDQEg40Pio9z4b/YcRzeQWSILgQdI8:f1qzMyKdbpi9rlwdRzDVgDiV/tR41LgG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

783414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Purchase Order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order.exe

mscoree

dotnet