Purchase Order[.]exe

General

Target
Purchase Order.exe
Size 756KB
Sample250423-hs9f4azyf1
SHA256 5f25c8dcfee56dc11e03d1001f7c46e5adc9103651771cf82875dbd3c95c6775
MD5 d497eb3925a3eda09d61279771479c88
SHA1 40567acf03bbcc7a24dff1fd49fc3ac61d5d0708
SHA512 743048e94cb289a9bb547aab9affdcff2115c052b191e031fa82fcc68770bedc6cf2a1dbd981a805c98504af872e1b43c2d05d0b827b9672490ed68792a794b5
SSDEEP 12288:MfjPC8EFzGjaHgqK0dzA5X80hwmG2vwNCp4F5mFeUKdW5drVR:MrzczYaxKHpwjkj4F5mFQdod
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order.exe

File Explorer

Purchase Order.exe

.exe 756KB

Purchase Order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5f25c8dcfee56dc11e03d1001f7c46e5adc9103651771cf82875dbd3c95c6775
MD5 d497eb3925a3eda09d61279771479c88
SHA1 40567acf03bbcc7a24dff1fd49fc3ac61d5d0708
SHA512 743048e94cb289a9bb547aab9affdcff2115c052b191e031fa82fcc68770bedc6cf2a1dbd981a805c98504af872e1b43c2d05d0b827b9672490ed68792a794b5
SSDEEP 12288:MfjPC8EFzGjaHgqK0dzA5X80hwmG2vwNCp4F5mFeUKdW5drVR:MrzczYaxKHpwjkj4F5mFQdod
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

778066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Purchase Order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order.exe

mscoree

dotnet