order details[.]exe | Triage

Sharing

General

Target

order details.exe
Size

623KB
MD5

fa4fb7b2b984ba67297985696bc2f393
SHA1

747fd5fd2f007269cd437dc5d91956d66cce8d88
SHA256

29eab90d00959df3bc7e2699823e8521eec34be6a967e52fe6d71f519ed16ad8
SHA512

42cc988297a5b221b8b2c34d3b55d1039401bca6dbff3264ef6f8645c920ca99dc693e826cba526022b2b1151c3ab820699ae857a6f5acdecc06f758eeb7a425
SSDEEP

12288:jmYCfCFzee/cqoTvl3FIcca27p8knmp/dlBlhdGa6vJt:jmNqRoFTt3FIfanknML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
order details.exe

Files

order details.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ