Static task
static1
Behavioral task
behavioral1
Sample
RE.order.exe
Resource
win7-20230831-en
General
-
Target
d9fd972ebef238077d5121d1c96b1e86b18f34b4e1374d79295ccbe0b893088c
-
Size
610KB
-
MD5
3627a8d9684cc7b47b43a61c4033ea7b
-
SHA1
dafae2efdf59255cc57a5c8a2324ac5997705436
-
SHA256
d9fd972ebef238077d5121d1c96b1e86b18f34b4e1374d79295ccbe0b893088c
-
SHA512
786fbd1b28e5ab91e61c1b486bf0708dfa88791424e7db21dea71963c26de7df1222a8bce5ac6c8bbe6231c8b4b93582d2fb70901e7c09a5dd6966f35faf31e5
-
SSDEEP
12288:USMmtFyfjBkuXDrx665VT95/tIdSwjDuecdtvsYdksI4oC:UXfjBkYD166l5/rwjD/EBdksI4t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RE.order.exe
Files
-
d9fd972ebef238077d5121d1c96b1e86b18f34b4e1374d79295ccbe0b893088c.zip
-
RE.order.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ