ORDER_LIST[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDER_LIST.exe
Size

600KB
MD5

e03072b5390a0e62ab980f32643fc80b
SHA1

d951ea138cbd936d52f0d2253dc88ebcc8a7bfa7
SHA256

ca69b2a10374843efe51585a58ffa43f65fd4cb0f78787009d94eeac637db8b1
SHA512

4c09ef6eb1687e42955d221730ca8ce071111e2c343ea8e99c1bbc071bbd016965a33ee50eb2294f209f2bfb9f1345879ca987813ca2a29ddb6284c2020167ec
SSDEEP

12288:/KFQmymXknLaxx0OZEIKRSvPu9NtPLggsRZ5fC:/KbQVR59NtjaC

Score

1^/10

Malware Config

Signatures

Files

ORDER_LIST.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ