PO 6039792 Order Confirmation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 6039792 Order Confirmation.exe
Size

970KB
MD5

fabbeebdab711d7c69b4efe2844ff870
SHA1

adf8d061da7a2f238ca054319d6b3f314ae1ed57
SHA256

74a2d217ea8475ba2e01664b539d851c89b9866eb634e289773424dc680f76c1
SHA512

e13969f4008384060e7726db0d4d9e676f082cb8dc8a377936a455ed771390af3bebf369ac410403254d693d8477ceaec85e0c08223b2d07a0f5a9b3f8a6b3a3
SSDEEP

12288:I1zDYKOwJrXbsRkj1gVPs2Tncn+x++MJov1l6qNvuvnR8qP8fCsDbs/kv:IyK3JvsRkQPs+nxM/I1lQvLhsP

Score

N/A

Malware Config

Signatures

Files

PO 6039792 Order Confirmation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 968KB - Virtual size: 967KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ