Static task
static1
Behavioral task
behavioral1
Sample
ORDER #08024023.exe
Resource
win7-20230712-en
General
-
Target
ORDER #08024023.PDF.z
-
Size
583KB
-
MD5
b4bfec06d93fc7be1085c02702bc7ed0
-
SHA1
3ce351ec065cf74132bd11e6861e1d01ddc03bd7
-
SHA256
b375d323c73727f6d6d85dc6080e328571b8d5ba9f5c9d4cf926c762522efa6c
-
SHA512
812ac1ff8fd08ff9a3e5d5aa997f1832f091ddfb3b377a09b28d85b8e50fc62ebae6b3ba8a799d29a87326b9e57a5666f9737d554166a99d2ca8681985cf2c40
-
SSDEEP
12288:RrTHOZuyDH5e+P8iThMp7XsA1oCyhXHwZ0SBxKZ6m5dgpBd81R:8lD8+P8eqpDbGCyhXIoZUd81R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ORDER #08024023.exe
Files
-
ORDER #08024023.PDF.z.rar
-
ORDER #08024023.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 627KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ