ORDER 2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDER 2.exe
Size

768KB
MD5

1599fd4a0fc60aa3931ae79f785bd7e8
SHA1

b00df5b4dbed565098e742d7a5929c1971af2e7b
SHA256

302d354a18c1789584296c21427577dd4d095681b6d232d07f3a1422e95f05c2
SHA512

9e04c1c5a4f7716fa132e3b6a4b1ffbaa3f1544f94945acb5d76713477385cc8dcb3042e25772e08417b8ef1a75ab3053527bb555c701bc158d2afb48fc7ddc1
SSDEEP

12288:bbd6N/f6moESz477LH3zaPy57tK1rnbSj389b5WxWW:s9ymNSM77LDaPOK1rbSj389k

Score

N/A

Malware Config

Signatures

Files

ORDER 2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 740KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ