Static task
static1
Behavioral task
behavioral1
Sample
Order_33849.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Order_33849.exe
Resource
win10v2004-20220812-en
General
-
Target
Order_33849.img
-
Size
60KB
-
MD5
c3a9e3e65586765c05d3154552a90258
-
SHA1
61f021ea09d1c02b1cb7071d119e2e126520a5d5
-
SHA256
34abfad52b6646b6f6347c7cb5bcc5faeac2543fc0ea1509e0d27a6664ba1a51
-
SHA512
1896f8838d1115ac02379e257d4ddda28940468394c984a5a0647a442f86d1344e9b7502e58735e92010fb9b0e40fc769d08131732c5a621ae170f1553e9786e
-
SSDEEP
384:sP0EWle+KWSLO9OJMCIIhptYcFmVc03K1:LHKWOWpktYcFmVc6K
Malware Config
Signatures
Files
-
Order_33849.img.iso
-
Order_33849.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ