Static task
static1
Behavioral task
behavioral1
Sample
P.Order.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
P.Order.exe
Resource
win10v2004-20220812-en
General
-
Target
P.Order.exe
-
Size
1.0MB
-
MD5
fdb328d253f91547bca0378c9ddba5a2
-
SHA1
c2119f54c4dea3613df03bdf058438785ac7f2ad
-
SHA256
29303035e598f0f7b42f62a3cf387daab1873c18b0fd850ab8fa470069fba189
-
SHA512
323bf8321a68257d9106823db054c316a6cba100d51f7eec2cbf6051ac3d97d5327ab96bb08c045954726d2356909008af3c6caadc9f2ed0d427c1d30e1cf400
-
SSDEEP
24576:lB3wtYrJs6oMvWw5pHmJFKUEiTznmblg3R3XR8:lGtQy6ofg8EiTz8
Malware Config
Signatures
Files
-
P.Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 934KB - Virtual size: 933KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ