rem order[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rem order.exe
Size

872KB
MD5

d4667cc2adb22602bb43b4c36e3335e8
SHA1

049b8cd3e56c89055a9861b685a2558df1c5ea80
SHA256

9a9f97730428c5ebf9993dcbf5facd3710859edc5636fc9a84cac75072cf7e5e
SHA512

3302cef4deb87771bc2bd862b49859ceb52ab68befe436ff62856fa4e905fa42844cde26af96ef7ff3581d649f9325e24dabb04b46e5072814fb77c8ad98092a
SSDEEP

12288:yfzD5B7zO8+qFS+v5JI5EhY4J2K2g5f2gOfbDoG:yfz1B/O8fV5e5Ehn0KZ5f2Jfo

Score

N/A

Malware Config

Signatures

Files

rem order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 855KB - Virtual size: 854KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ