Static task
static1
Behavioral task
behavioral1
Sample
Order Inquiry.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Order Inquiry.exe
Resource
win10v2004-20230220-en
General
-
Target
Order Inquiry.exe
-
Size
963KB
-
MD5
5e9d13e13242264664679b550d0ce699
-
SHA1
33b5936c0b6dcfedd4bf2664a1da00b839bb8079
-
SHA256
c4e5c1a9894b81e3b415adacea8105f3d84f73c10cf3bb759e4afc481fbd4d8b
-
SHA512
dea75b23b273c225f689541f01f789bb353d09488e4cdc21d57c4aea2b67e50db31d64286eb9e8454efd00bf64c8f09e3f2e0991d81c17a12680b024bdfddd09
-
SSDEEP
12288:hO2iNo3XdJVZz5dB3QlpLcMNPQVWKHodT/63oScggtHJxdIdTnTQ9r5GnQRL9:hO12zVZ97Qlq+PQVKNScg4HHd/+Cp
Malware Config
Signatures
Files
-
Order Inquiry.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 961KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ