order confrimation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

order confrimation.exe
Size

763KB
MD5

0f33e7e49d65f57bf6fad9d42faf7d58
SHA1

5f9995d3a89a4ed2702f5eda43280d091e077910
SHA256

351f755a15fa992f69ae30ee974f614fa0fe76f9b93c70812de0486a9c66cf9c
SHA512

985e71f6880e6e0c701ef3947f91f83280b59e788e696668f1c0eb1d47ae232b87fd1bc5282580dfec53172d8d6109e0a71ad73e7a3e5a15edcaad8123a2b1c2
SSDEEP

12288:SiyjrNHEhn8SiH4lyHbD8pK1Bokiq6T3TWxZNOrx7p58lCrd4gyQapWMs0PA:SxjrNkN8Siz8cOK4rxN5IC54TWMxA

Score

1^/10

Malware Config

Signatures

Files

order confrimation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ