ORDER 0749[.]exe | Triage

Sharing

General

Target

ORDER 0749.exe
Size

981KB
MD5

03822cedfe4d336fb7b8bab0e101ae7f
SHA1

4cc85c0e8330dc7d04b1883d0eac35ddd5caf45e
SHA256

ba82a2d12cfee47fcfab1e288a80e1792e6a8e8260e7582b007221918aba0310
SHA512

cb0f8918e21e1c3e7748647ccfd088f96bfed02e5e84e8e98c0b0716d3abe69e8a9fb33562845818c8164e25f61d3f6a852c53e0404c55d5e01ba50072c04079
SSDEEP

24576:j1g++PA0agXAK0QyU7QWRWrfAWC0Jjm8T5:jU40JT0QnsdC09m8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ORDER 0749.exe

Files

ORDER 0749.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 978KB - Virtual size: 978KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ