854CC0F842D4859CBCA2E39C979BF3FEC8A6D5E051B5A53C86286F8E8FD85A67 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

orden-PO-2...df.exe

windows7-x64

orden-PO-2...df.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

orden-PO-23-016124.pdf.exe

Resource

win7-20230220-en

agenttesla collection keylogger spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

orden-PO-23-016124.pdf.exe

Resource

win10v2004-20230221-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

General

Target

854CC0F842D4859CBCA2E39C979BF3FEC8A6D5E051B5A53C86286F8E8FD85A67
Size

700KB
MD5

1b6f9268188aad2cc59e677516a3f277
SHA1

8b48baba5904d58f2e973f7fe7a434776d1d6ba2
SHA256

854cc0f842d4859cbca2e39c979bf3fec8a6d5e051b5a53c86286f8e8fd85a67
SHA512

dfbb5cbdaec1b1ef233953efc21c62212c4986e368dd4901abd1118d03b634ce48a0682f1db5f40cd3dec345c2a812fe47960ca34dadb285368222a7ddc843c5
SSDEEP

12288:w6HB1LACXPRJtAttAA/dIDgASY+40UZwX/2E/ZABekcCIdENd0HpwCTqbDoZP8jt:ZH7ACXJJW5AgASY2UZs2E/yBnlIdsdgS

Score

1^/10

Malware Config

Signatures

Files

854CC0F842D4859CBCA2E39C979BF3FEC8A6D5E051B5A53C86286F8E8FD85A67
.rar
orden-PO-23-016124.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.