Static task
static1
Behavioral task
behavioral1
Sample
ORDER_11.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ORDER_11.exe
Resource
win10v2004-20220812-en
General
-
Target
ORDER_118802.IMG
-
Size
1.2MB
-
MD5
0772fe1df7bbf98bd849b8ea025d6aea
-
SHA1
30bdfe75cd9702d0be79483154d3d2e6da1e63b7
-
SHA256
d81720d1a15508ed513442ea7d6b026b2452e957714a74adf3d535becbb74843
-
SHA512
9e0b3dc4bc419d54647a900f10a64700a3209ad064575e2e7e5eefa31e4fab5550ce8f52fe4b10531a09dade72123bec50e89e2c7fd4b07a0aba3979372a7713
-
SSDEEP
12288:uKFQmymXknLaxx0tKKgaciSrgvRsHLFVIx+9rUw:uKbfYr9vYE+ZUw
Malware Config
Signatures
Files
-
ORDER_118802.IMG.iso
-
ORDER_11.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 502KB - Virtual size: 501KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ