Order Summary + Drawing[.]exe | Triage

Sharing

General

Target

Order Summary + Drawing.exe
Size

375KB
MD5

0cc1e03f5fefd973633c3308e57ad664
SHA1

84c5668051098501d42166e8896cf40ab91b6aaf
SHA256

2fdef4f0f225baf2b6f2443952fc2bf69741bddb4615939541c6b30313e2a3ae
SHA512

271bc4d7efe0bc006bd03b50fe7cca977def0693eb18e421bdd85f3bad39c6327cab3459db9bda1770f023dd93d62ff233ff3ac8c28c87056df5a99fdd6e997d
SSDEEP

6144:ip+inf6j4trfOtfH0i7r6bKlp4hphx47+RDnsoy3YbqwvHHCTdobAbCx:ip+afSQfOZuml+phiIDnskqwCRsZx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order Summary + Drawing.exe

Files

Order Summary + Drawing.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ