nOrder__MAY05_0[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nOrder__MAY05_0.z
Size

847KB
MD5

2a1a1cf3c835d73a65820d5993e3c58a
SHA1

1d02a57256a920510d03340bd586bcb408341396
SHA256

e447fa381cfa6608d4a5eab7243e117713c212c714ccb469d8a460d503f0e380
SHA512

4b4f6e15ee4b2b7ecd6e0a5ad636ac48980f0706acec3bf43a55bece18ed210bb4b48fad10750d479c817c54979ad4d2efc7a718256c4525411e2e280aa0cfe2
SSDEEP

12288:uWlFMGeMKsjvRSyr/Oo7F4eYpqRcjVBKrvavgI7kr4z9rouePWa6cfhed+TMkdKG:NlfZ8yr/OSF7YpHHCavVdBCPEuAFk0M5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order_ MAY05 01BB77FIBA00541·PDF.scr

Files

nOrder__MAY05_0.z
.7z
Order_ MAY05 01BB77FIBA00541·PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ