rOrderDetails_pdf[.]exe | Triage

Sharing

General

Target

rOrderDetails_pdf.exe
Size

618KB
MD5

0b68dfdfea6616fd9cf35ecbe948596a
SHA1

6d259435293da14917af177a63783e18b574f577
SHA256

4c8180c106fdf8c5c144e85b22eae0ce157372378310a1b7252326e6521a1b2c
SHA512

5814ea28632bd55edc3d22cf6a693c9de4041b418dc069a06b9d0e7eb4a7123b60adc1e4389a9685b1934a7efa6bfdc442131d4628c497b15ba45c0ca7a32840
SSDEEP

12288:wyun1v5XE9qzZzI+xX5eZ+HuOF+UPbu6PwhGRsPpAz/RC:liFK9mNp++OOF+AbfPFuPu/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rOrderDetails_pdf.exe

Files

rOrderDetails_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ