Static task
static1
Behavioral task
behavioral1
Sample
URGENT ORDER.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
URGENT ORDER.exe
Resource
win10v2004-20230831-en
General
-
Target
27bc2e643cbac191f090cecd20ec1bba.bin
-
Size
293KB
-
MD5
d01eacf99a8075df6273deba3b7496e4
-
SHA1
af1b01c474150ca68639243effe5cab752b1d75b
-
SHA256
1f7307cb7c43b1d867acfcc7391635e4bdd50de523634cb6e63c557d7ae91cce
-
SHA512
ca0dc910e8616e168a3d0923bfbc5d98e228840e044b03a644876ad2a231f32d38acc13709f088b60984719315ae8d7957e5ac73143b1f9cce6ddba00179992d
-
SSDEEP
6144:pkFr9GQjXKZ+RaCnXBCuIMNpr1+kMbbxV0vAVe1wi9d9lflmqZ:pgpGYX5R7FIMNpp+kMorDzH9mU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/URGENT ORDER.exe
Files
-
27bc2e643cbac191f090cecd20ec1bba.bin.zip
Password: infected
-
0bb82bf5520d17e1b3a65a988f822e01c186036f77a4ccb2976a0cbcc08eaf64.rar.rar
Password: infected
-
URGENT ORDER.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 817KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ