Order specification[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order specification.exe
Size

862KB
MD5

aa74f12c88406ba33e3c6bc4ff660ea0
SHA1

f5f766d71894c6609d69c41c586b2b8f0cf6fa9c
SHA256

9e0f3a76f2002cf91bb6c9e63450af0119391a5cc5ff1da070e7116157e6f35b
SHA512

f64c26d72ade02c27d62e85f5c2c20b4b556cd689932eed3abf2df94e2b46d81cebb94235c6f1b572ee1c2a16ac3c970415d0a5c885bde0c0ee91915fce795e1
SSDEEP

24576:cFG4n014KI6XdY3NgqQ0YmBrMFHOSZIymhu:c8MBKSE0XRguGIym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order specification.exe

Files

Order specification.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 859KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ