ORDER_4490_0003469[.]xz | Triage

Sharing

General

Target

ORDER_4490_0003469.xz
Size

634KB
MD5

ededb79530abde8f97410201d4fd32fd
SHA1

f3c99645eb4417d16ee4b357a9dc4a733176bfbd
SHA256

b299c80af5acb5d669770fc6cdf23ed76a876777cdfa4b99046f6803b1181428
SHA512

31a18be8e68ba026d5fe99d067cbec59614f6530755e5c136dd988b03ea2e57e2f0edbb6b2bc6ca831a70cee95bcccef7fd0b92e22239fd76bba5b0d9847788b
SSDEEP

12288:Ef9CkhMM8w9ymCVfsFDpxRlHYWavuncFNSPkwKbN:E1Cksw0mRjxv7gnNSchN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ORDER_4490_0003469.exe

Files

ORDER_4490_0003469.xz
.zip
ORDER_4490_0003469.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 643KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ