New P-Order-19[.]05[.]23[.]exe | Triage

Sharing

General

Target

New P-Order-19.05.23.exe
Size

896KB
MD5

18eaf595b5c647f5676daf3aadbca720
SHA1

9ac1652a53cbb0966e1e98a7392d312e9025e9a6
SHA256

2d2e43cbbe4c81767774ac3eea5e5f199b1ad6233e4670f3c250ccb6cb7817cd
SHA512

01b8de972e46d70eaa930f6e6f5559191a8af32eae03afebbac26d28bb589cdb962c7f50a00d80dacca4b33088e9b0fc079f2d505ae1da3a76ce95af1b78a5aa
SSDEEP

12288:vRLpNaPn0YPX/N94+OCYMMY9hLV8bTJ2laXGxD8T8b/YvhLxJYzOhHu9mIUm3fmi:cP0tZqhB8bm4+D8Q0NJCO9u9mIUeohW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New P-Order-19.05.23.exe

Files

New P-Order-19.05.23.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 880KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ