Jidong ORDER 023-MAY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Jidong ORDER 023-MAY.exe
Size

702KB
MD5

d4a26861d78572f301e1269d24c36765
SHA1

0de357fd0942d0485848a1d775e3cedd156e5181
SHA256

d1c42fef143e11679953bccf17e53229b292184c675da25ebc1023b84baf745e
SHA512

6af4ad97c2a63bbaeff952767c575cd6b88255eb17762ab176ea8a7822c32b27d6fb4d92d0dd46c29d3b6ba9ee22df6462bfc0c7fd1e26221b3299cc6d916f86
SSDEEP

12288:trZx1STHBVOVdhS7cAsX9gBqDPgItMNHy25gkWYagjo0UawIUMwF:tT1SDTbk2sDPfKc25M0jowwIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Jidong ORDER 023-MAY.exe

Files

Jidong ORDER 023-MAY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ