Orden decompra[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Orden decompra.exe
Size

1.2MB
MD5

d780163721ee58d77e601be02b0dd66b
SHA1

4d0c8b81cfa4c0044e9d80abd85ff25729560088
SHA256

c662f20ac7e7a79549eb53292c3d28705a9c00e6a4d677747cb98d4669a045c2
SHA512

c4422482fecaa8e31e049219c11ee980b78bb3102179f275393f4927a9bc85fe50843f58ca5ea13ac05f674bf549105adb60622c710319cd8231bd0e4ae496ea
SSDEEP

12288:qlIH9ouHH1JJ2iNXu2iN7mawMBQc6zPhsUhlq11eI6TcTaOzvcniuDlkejwFGf:zHOu1j1A1UaItJ/q36Ya+vciAeG

Score

N/A

Malware Config

Signatures

Files

Orden decompra.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 897KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ