Static task
static1
Behavioral task
behavioral1
Sample
ORDER TKHAA88160011B.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ORDER TKHAA88160011B.exe
Resource
win10v2004-20220901-en
General
-
Target
ORDER TKHAA88160011B.pdf.tar
-
Size
442KB
-
MD5
6a8b874e097d8fc6c456c1330e8be323
-
SHA1
987c82f0c0220c4df4f41eb49dfa839252d18a1d
-
SHA256
d4dde4b76041d04723bb3d3e9f6357ed3b5dd8d3ac801ed78c47e0d6bc3d70b1
-
SHA512
bdce2d4ef765113be3375e041958b35643e1fd2506ca58eef0e2145a7d464ca509d2351fbd13d05265c32e4d76d0f77b8a01582af556fbc5f9762eadb9f92efc
-
SSDEEP
12288:VGjmXxeBBU8LrwBekIrAY1V1E0CUzkwmZ3tRgzb:VGjmXx78PwBdIrAY1V1qwy3wb
Malware Config
Signatures
Files
-
ORDER TKHAA88160011B.pdf.tar.rar
-
ORDER TKHAA88160011B.img.iso
-
ORDER TKHAA88160011B.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ