Static task
static1
Behavioral task
behavioral1
Sample
ORDER.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ORDER.exe
Resource
win10v2004-20230220-en
General
-
Target
ORDER.zip
-
Size
397KB
-
MD5
260294070d43ee5907a035b9ff4fe50f
-
SHA1
91ca0442ca61643c48a9a3d8dbe12fe22bedbf91
-
SHA256
211d7ccda5b7c2b125706af35b4e921fec0f9589382b82d3c912ba1beb888a85
-
SHA512
9e7e66788bcf8fab2c5c9820381ac3372240d34f85fb67c0f9f5e2290ca53ce1c77a7007821796790128317633a8ba78565ca5ec24962bd330ad9b3a7058b88a
-
SSDEEP
12288:tg48ZHFMyr8AJme7dEu7DJT1wwWoERIflOCT:tgZHFMyYje7dHDpWwWoER+Oo
Malware Config
Signatures
Files
-
ORDER.zip.zip
-
ORDER.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ