Static task
static1
Behavioral task
behavioral1
Sample
ORDER TKHAA88160011B.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ORDER TKHAA88160011B.exe
Resource
win10v2004-20220812-en
General
-
Target
ORDER TKHAA88160011B.exe
-
Size
631KB
-
MD5
3602557e98e8fd7ee51ae3aeb0582993
-
SHA1
89cabcdf68da3cbca5d5a5d807e74b3862a6677a
-
SHA256
7fc10ddd02bd873f4a8b0759ac782da6cc9c2c211b7f91b9fce01a1571b02d87
-
SHA512
6358834d0dd0a8b0a9362ba60293740e7fd96fafcd612304c3c6504be6b0d02494e03a68aa845dc4e495524f33773ee32d093cb4a3276579ede86399f114e4d6
-
SSDEEP
12288:TeGi0YaD2UQdDC8WafIPafIXTzW0EAmD:TeL5DTWafIP9XTl
Malware Config
Signatures
Files
-
ORDER TKHAA88160011B.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ