Order Inquiry[.][.]exe | Triage

Sharing

General

Target

Order Inquiry..exe
Size

685KB
MD5

65efa9fc533749d45af997a874719588
SHA1

4e5702dffa295ec86b48b74fd3f909b8994236d4
SHA256

89dc8c98551c4f2b309fd2807b8bf1d24e1c2abd953930f95b5aa1987e0966f2
SHA512

69ff71ec6cf24b235343e870b30d3e44e7b08890fab76bdf7d3c6a0aa66f42f903c87430d268b720c183481d8f051d187461b21b29c737dd7bd037c271b75f91
SSDEEP

12288:Utpx0YPX/NqPsHqAbe6ZxcbHO+9J53SBkvyo5uwVbRX4sjqxH:UtcHPsHbRZxc7O+7xcNjcbRHqxH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order Inquiry..exe

Files

Order Inquiry..exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ