Product samples - new order[.]exe | Triage

Sharing

General

Target

Product samples - new order.exe
Size

579KB
MD5

bf3bd006f835d90c757ff98930fcb18e
SHA1

eb32977c884c2de3435218f365c19159a1886d1f
SHA256

b6f722fd8ecb1b6116c8755a385ade64a3155792bf053bfa9d477b4a94eb6132
SHA512

a0b4a79b54e4b5dde9d5514ab1a67b6d07f212ce8288c1e831d067656dd3740f5520a96938f110007eeb66bbd890880e9748ac42c3d807de61d50aceae396749
SSDEEP

12288:1SD3FsdOkvY0NOUMqPoos6h/e4z6sfoxWyv2:i3FshQ0NpQJu/T6sgWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Product samples - new order.exe

Files

Product samples - new order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ