order[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

order.zip
Size

529KB
MD5

001410cc5dd7b776b18090f999e5a46c
SHA1

fc3b3fedc6591470fc08db274c3738f5bd3d7658
SHA256

8f6c45d5584698615cd850904b02b68d00158dd0b6fd36a4ae8d28a6a01adcb6
SHA512

d0fb89a866ec2b6ec05c0a46aafaac7e05896578119bdaa8e82e379da638a25786b7c413506dbf5c7aa34854540d46aab2719c1a4983c585b174596ce49ea971
SSDEEP

12288:UTaqLwq974qr5hpB3TKNLU5PkEsuQRzkxduycLfMzd818nGklO:gaqLmqd5jKNLMyfzOcW4WGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/order.exe

Files

order.zip
.zip
order.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ