PO 6039792 Order Confirmation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 6039792 Order Confirmation.exe
Size

1.1MB
MD5

b07aa9dfc5d811a9c8d2f8d5f572820b
SHA1

c8b4c2c264e26a97930a686db3de1e2299181196
SHA256

8dec2b94ff0145d6dc5c78666df6b56f3db7ffd345439159303ec31c26ae3e8e
SHA512

d3a45ac911fd15c4a6e5f43c74d5490c7d0f67d34b3d0e2a14f548fe619303f35208fccfa064fa15f24441553a2a2dee101924b3d87c2ff12d2a8052dbd740d8
SSDEEP

12288:wbKiCGYssaxCxRxfCSP7D3dOnVeXpRlauPXGLyl7p5ICjr8Kvv12tw:RGYsef3P1OnGzv2U5ICD92

Score

N/A

Malware Config

Signatures

Files

PO 6039792 Order Confirmation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ