Static task
static1
Behavioral task
behavioral1
Sample
isco order.exe
Resource
win7-20220812-en
General
-
Target
f5f5eea1fb0b5c5a8765752635d1ecb7-sample.zip
-
Size
674KB
-
MD5
b6d895a8f3f9bac6d6c388a83ecb3263
-
SHA1
f739cafc7e9a5883669f92b279e5ead0f9a9dec4
-
SHA256
9adf3bc548af5606c220c94710d00ba0527bb963669d25bd3a19fba7e161b852
-
SHA512
5a0374092ba65d1e7d121c0f82173faf3a2be0c0ec1ba609ae08560e3e0651d9b152dabfa338e1e65106b9843ccf6d8c9a594fc455ce560e0c245a98a0be01cd
-
SSDEEP
12288:Zvl0E71FB8OdUWv8Nmc6+XdOuqqE+Cd72eGmZg5//RqSxBS8L2jUUBI6Flz:ZGE18Oa8uO4NiieGmZgxRM8LGF9
Malware Config
Signatures
Files
-
f5f5eea1fb0b5c5a8765752635d1ecb7-sample.zip.zip
Password: infected
-
isco order.com.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 989KB - Virtual size: 989KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ