Static task
static1
Behavioral task
behavioral1
Sample
ORDER-231703.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ORDER-231703.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
1DE14F50933722D5323F76BD310B3437FF9D23F49CE769FC97BCF9B44859D1CE
-
Size
1.1MB
-
MD5
d3ca4e89b0dc9341d1e2a9245a179627
-
SHA1
5c1721de3f6ef1fc8860ac9d8147270977eb17f5
-
SHA256
1de14f50933722d5323f76bd310b3437ff9d23f49ce769fc97bcf9b44859d1ce
-
SHA512
608c59bf996ac558a092b57f6eccb1b7a1033e1985dea871ee20eac3782977147b296cdb3d7937d56f14ac8fc1d6d2cdf57737f4d66fa55e502aae5761f629f7
-
SSDEEP
24576:B+QuyDgpNfflT6nXQ3TWUda9UyE1wcd0a3eb2COgtPY:BVDWfl2qTZeE1wcU9tw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ORDER-231703.pdf.exe
Files
-
1DE14F50933722D5323F76BD310B3437FF9D23F49CE769FC97BCF9B44859D1CE.rar
-
ORDER-231703.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ