Order[.]r11[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order.r11.rar
Size

528KB
MD5

0758d1d2fe040ca1f93df51d257343ba
SHA1

59b2dbf513aba7377d1d0e4315ab64844d669e77
SHA256

22214fd32b545edd15b7beea54a693ba56a36fedba79856f6678cfcc62c54b7c
SHA512

31380a608dc1dd204382bf03ad5808cf13a63248444c5b46a399919be60ae91f2c605aece29f80bcf6ecefb98af5a319afcc9d20493b85426d5f34e41392ecf5
SSDEEP

12288:82Y0wPmDmubj4aB63U8x5NER9uC7xSvKvJzzFo:8xrmHjCU8tcQ6xx7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order.exe

Files

Order.r11.rar
.rar
Order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 911KB - Virtual size: 911KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ