AP202-230504001-ORDER[.]exe | Triage

Sharing

General

Target

AP202-230504001-ORDER.exe
Size

1.0MB
MD5

0ac25f96a967ac41a1e23a6d3a791412
SHA1

0efbb54567b18570ccec48ec3fc1bfc4e4afe19c
SHA256

d930e3006b889c13cdebe9004c021ed18ebe31f1504ffce27f10277e439329e0
SHA512

7a4da1f0bc915cb148bf9b2de87d8bb7ca51f716f564bd203d78579900971547cf6c2f7bc9679d11ada2fd094e515e26ed7543b17a5ccf667d63620ca8a3e8e2
SSDEEP

24576:xQCtqK7enlhpAd89yvum9EKf/N11tkiSnRF3ECJ4:qCtbeKiyvT9EKf/NZkLRFzJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AP202-230504001-ORDER.exe

Files

AP202-230504001-ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ