Order confirmation is attached[.]exe | Triage

Sharing

General

Target

Order confirmation is attached.exe
Size

660KB
MD5

2baba6527ed398ba7b06a00e45dd40c1
SHA1

ce713595cae3f768b08708e3adc87d5c10106f9c
SHA256

1ba810ae481530f7ac447ba7833cb3ab9fe4547ff978bbbeac3c685c8e8401ad
SHA512

54ce52c0612532201ac920163f61defdcc575ab029c8270a2404cf929124953529879866fa9cd0d00e255d541957b5cf6937a57ba3e8109d26da3907aa7f2fdb
SSDEEP

12288:bUvC6YN1PWGEDUuev1DXXU88HyZ9bKKN4rJTcy080DCb1a:SLMdU8KyZ9bKwZ8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order confirmation is attached.exe

Files

Order confirmation is attached.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ