Static task
static1
Behavioral task
behavioral1
Sample
Order_confirmation#278367.exe
Resource
win7-20230220-en
General
-
Target
84A6F7FFE7A9E808E465525CA5EDB627C2308948FC4198304C415BA13CFC73FE
-
Size
98KB
-
MD5
b0c2fd4ab2e8f6fe12916a851fad4e49
-
SHA1
f0ab8dbfac42939af5e900b0a09427f7e0b6fd72
-
SHA256
84a6f7ffe7a9e808e465525ca5edb627c2308948fc4198304c415ba13cfc73fe
-
SHA512
0233646235656d6503cb1eab6950538602a4afb603f770086bf209abcdf84e05a7c5f397823c06b8a0c61badef2664417e5fdebd76da625c520c01ed42acc57e
-
SSDEEP
3072:yxti3jApPnkyUYAkxBbhuCMfNDwg6zYVXLAbqbghq1gd2:iEokyUwxtqZwgFTkhm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Order_confirmation#278367.exe
Files
-
84A6F7FFE7A9E808E465525CA5EDB627C2308948FC4198304C415BA13CFC73FE.zip
-
Order_confirmation#278367.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ