Order-688930021178[.]gz | Triage

Sharing

General

Target

Order-688930021178.gz
Size

1.3MB
MD5

9b98cb7172b8c9d0f90a61026bd429b8
SHA1

e019c5ddbc5089dd1ea914e5e5c02f9d0f425e0f
SHA256

2c96adb4c6b8c3dd82890cc40049dbe67a141ccbf07155ad68ff8188853fd790
SHA512

334f095c9977dbbe1e01a55457489125c260149b8565a907c6009b63b84897735137e9b608c19cdde93489d114ed23970dfdf3e3b9db6c0743e9f1cb772b069d
SSDEEP

24576:MT3DpZ5QzKvlwfOqWD8L7R1gfirxfj3QDm0Igl19/4l3FXOqitp3gqpQ:MTTprDmfOqFLLgfirVj3VKzWlVtQwCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order-688930021178.exe

Files

Order-688930021178.gz
.rar
Order-688930021178.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ