Order Specification[.]exe | Triage

Sharing

General

Target

Order Specification.exe
Size

594KB
MD5

704fe6317224f93944a2cc4270a7d941
SHA1

1a7960e9d0415caece34a9ef589ff97358ef9dd5
SHA256

95213d85255aaa0f9a623a1119c7438b9c50e5fe8110c16b800ce584794a808e
SHA512

467897d8e44070ff6baaead29fd0038c2b41f6ed1079f45182bf78df4f361d3330ebde57d36a840e9c686a17cad4c8d35e664b511542d56b87f2deb29ce7b803
SSDEEP

12288:E2iNsXDl+CBlf3mNgVu80IS5q/dwlS0ltQEvmGayy22:E1gtJ3maVL0IXul1P7vmH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order Specification.exe

Files

Order Specification.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 592KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ