Static task
static1
Behavioral task
behavioral1
Sample
ORDER_4490_0003469.exe
Resource
win7-20230831-en
General
-
Target
ec8ad9012ea0d3c74652384349e9cd7511720ae307ce98e5bdd78e81205d1e1f
-
Size
631KB
-
MD5
9e7c26f3e6034923af072281030c0288
-
SHA1
8f1b45a29ee2cf16ea772e0c7ffa6cad76410c9e
-
SHA256
ec8ad9012ea0d3c74652384349e9cd7511720ae307ce98e5bdd78e81205d1e1f
-
SHA512
c2c1e90c93a04783277ff04804494ba878f70b15b7bb2155bce6b8a079d633076bb1dcf0f4c34ae81ceba44c9f54cbe61f41d24be4a4590e12a01fed8eb41e6e
-
SSDEEP
12288:41gBJWKM76+fzN+oC3QPQJmKl/NPgTNQhO5PSsl8wuiYSLQQdKShYdIZcx:41zb6MzMBxllo+hOlSslMUMQASqdCi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ORDER_4490_0003469.exe
Files
-
ec8ad9012ea0d3c74652384349e9cd7511720ae307ce98e5bdd78e81205d1e1f.zip
-
ORDER_4490_0003469.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ