SALE ORDER[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SALE ORDER.exe
Size

964KB
MD5

ba07bc9212feef1a872cfaa73c543759
SHA1

2f87693f36251fedc081c7c83cc68af6c12ecb5d
SHA256

c494ed6cd0a4d8886c208db2a6db48567dee075553ebfb5990169011a4c26a85
SHA512

a07ab64f4e6abb1b4571ff99c20e71c4adebc709957d6cdb11f28c748c06f540adeaa7e70853fcd39382d0e7b268e0ef902f04725a4532065b98524b5e8e2fd6
SSDEEP

12288:6K4JuxfqlPE5dYSWrOZBbC+AGwE3o7Kcermyw5wGLJWbPFidiqRi:Fy8fqNu6yMGwIo7UCr5wRFKbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SALE ORDER.exe

Files

SALE ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 962KB - Virtual size: 961KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ