Static task
static1
Behavioral task
behavioral1
Sample
Order Enquiry 202300221.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Order Enquiry 202300221.exe
Resource
win10v2004-20230220-en
General
-
Target
Order Enquiry 202300221.zip
-
Size
518KB
-
MD5
5718ed84bf8b2ac6bb869b70a0285c49
-
SHA1
64ac1f21b8751b7e4a16b53fa619aea2c10daaa2
-
SHA256
debe94b06c4356f58a216ee1f6f1a5a6eb2fe66940002533bf3cb129de6b7cee
-
SHA512
8e2d6626258e99d8322b60564a6d092a20ce8d7b2e626a4948787d769ab5e50e66e93e10e0d87112a96507fdf1d3223f3aa97512926d39e6665a3d2770efe5de
-
SSDEEP
12288:COa6o3NwrjIsleVRhJx656Ztf6QSUagGgEG+NTDKL:ba6t/NleVRfVZQFUUpSL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Order Enquiry 202300221.exe
Files
-
Order Enquiry 202300221.zip.zip
-
Order Enquiry 202300221.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ