Static task
static1
Behavioral task
behavioral1
Sample
order.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
order.zip
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
order.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
order.exe
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
order.exe
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
order.exe
Resource
win10v2004-20230220-en
General
-
Target
order.zip
-
Size
746KB
-
MD5
ba1eb1438001a461d4d0bb8fbbc33179
-
SHA1
7d9236e5f6c920047e1f36092b8406b37523ddb0
-
SHA256
b7a6e68980e154e4eca7e6e515276b5cee7f525ebe0f4d4c2e0e1879bcf8ad13
-
SHA512
a45b0c022ca62106a376a98544b07d29bbabc6f428e97d0abb4a71055185f5737ddf5edc533a3ce3448403af8b15c4bac7276c7b2dbf0d1d453a1b78b36e9cff
-
SSDEEP
12288:9Z6uNK6g9ch3D0A1/rh5IoS8P9Jr2SDCQrgF/Cse032/NC+8BVM6La5LHv0kzZFU:D6uNKJ9233rhyA5dcg0m/NCXVy/zp11O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/order.exe
Files
-
order.zip.zip
-
order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 566KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 378KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ