Order[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order.exe.bin
Size

838KB
MD5

4a4b476a512c60c92e92aa2afa3ef7a7
SHA1

083a3e656c8962b1e6bce8f19ef314046fbfed7d
SHA256

3f7098a7d18bb2aa2eae456f5d14592c46f53e28287fd9bf9a9fc253f8692ddf
SHA512

1a72f7e606b5dcc253afd18e7f1fe5f6e1b98d179d0f28993888fb43fbb12a1034c97cb50ec659c663285eadf6f28554dc88759cd2885f7b483c818d4d787e02
SSDEEP

12288:Yv/9WflU/9D5X/+j5THrFmIcegLBh8ds/2yyH5097qBuEuax6Ykr:MylUXXGj57r3ceSh6rx5y7suEu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order.exe.bin

Files

Order.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 836KB - Virtual size: 835KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ