ORD_1 9042023[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORD_1 9042023.exe
Size

40KB
MD5

c9555e3fff264ccdf3ae56ff7c408e0b
SHA1

a0bce436b90dc62dc5110c48319c5a8b5e9acee2
SHA256

91dff7bab30d0d6713ba56c522859ce8f773611c10ec7a7e7a0d9889612d0641
SHA512

8d72c8dbcdd55a202adb953f85277de4470bcdbd577cb211432616586920be8d23ef08567eb07a55c14beb5859bd417ec90d125226b449b1896f0af5daad9435
SSDEEP

384:Iu0wAjvg1DZmKbYJ8EFrLc3rOuNnCfWYnTTSwCZzMvOaex2jJaRozlQzY1Tf21lT:ajvMZm6YJ8EJKnRS9gIviwazImGj+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ORD_1 9042023.exe

Files

ORD_1 9042023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ