Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order #PO11774.exe
Resource
win7-20240903-en
General
-
Target
c3825d126fba5b9662997439e5f20da9fede82e4902172c86632299f7e512d74
-
Size
593KB
-
MD5
40d0a7985e3d570bb6cc44da3d2f851a
-
SHA1
2224b17a9af2cf94c70a2edfc5bbc4eb247a2bf1
-
SHA256
c3825d126fba5b9662997439e5f20da9fede82e4902172c86632299f7e512d74
-
SHA512
4be3f1291600eaa1ae690668608292c6012e949866ff085a96a4d1408294c739327c6f50febed10859853bda0831f836101b3a20452c48bf0769fc73a60b879c
-
SSDEEP
12288:1FEZdHysnxsSLVKc0QwFN7f2MWxg69Mx6IzrbLV98s6:1F6dy6xs0VR0QwNVf69Q/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order #PO11774.exe
Files
-
c3825d126fba5b9662997439e5f20da9fede82e4902172c86632299f7e512d74.zip
-
Purchase Order #PO11774.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 616KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ