InfectedOrcus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InfectedOrcus.exe
Size

639KB
MD5

09f9d11f42badbd31d374c9dab385e61
SHA1

4aeda1055482f6729d8f6ae290df2bf4a676df12
SHA256

ed6b679057db80fbfe55a4b493001c97278831626a4130fae931ee1532447652
SHA512

b02922799c9a8c29ea8971b1a70bdc64c75cc1584e1cff3bdf2dbe1c94a8c576887c427a70b86f655153854f1b3fc578ff16a952b75f44fd129c1609c1b2d247
SSDEEP

12288:oBcrx/M+ke9NcWF8Cd+A7md9N+Lzk5Ifwqv3tSxcl+DUaDTi:o+SZ+KSFc9IN/3tCcl+DUani

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InfectedOrcus.exe

Files

InfectedOrcus.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ