JULY_ORD[.]EXE | Triage

Sharing

General

Target

JULY_ORD.EXE
Size

658KB
MD5

053a24723e63a239bfe888d416882e82
SHA1

fe99b710087d85aaa1d7df69484abbe43ea76bbc
SHA256

c534bdf0dbce6d4ae61450892f0210419cccc8285cab1c42bacd01077d394b62
SHA512

71f52fc455770af59ae1b67bc706de9a6de3c4ac438f3300fc962d6a1b06bc28473215f112c99ad6d7a8edc4d3d0b522a043cc01669cff78af106abf08f1a8e1
SSDEEP

12288:Lx9xR5AITvJYjXaiUp/BrUpk6MCFRRRCvfQbxJiEbV2M9iOhB290oCdWEK:Lx9xDAqvJ0Xc/+kPfQ1JhgMThBc0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JULY_ORD.EXE

Files

JULY_ORD.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ