Static task
static1
Behavioral task
behavioral1
Sample
Order.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Order.exe
Resource
win10v2004-20230703-en
General
-
Target
Order.exe
-
Size
462KB
-
MD5
c4f9137955152e0a07b3f010e92bb07f
-
SHA1
a52e455d23d3fc7524742bdebc808d2fe0d58d82
-
SHA256
7db89fab4e6cafc168e02ae9030edcfd16f057f2168830f286a295aa135e92df
-
SHA512
5637a0b2401aed65e375e72a930d52fd54ddf25ba7181e10917f126d3f6f8e93ed6610f75675452f89b1fd0f4e378d661b1a9cd233eec225ce7502a49468cccb
-
SSDEEP
6144:ubqPouQ7u0a0Lgb2mzHy2ZkFlq2hOXsG0UL19s18EETdO98EGWQCUwOOt:4qQRayLk3zHtkFlxOp0UHUpIPEGWQA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Order.exe
Files
-
Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ