OrderN[.]01730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OrderN.01730.exe
Size

567KB
MD5

4dd94729e944943aa06102739ff3c73b
SHA1

f7682971b549a7df78c628ca3282f0ce7ba84edc
SHA256

2fd7cf13f5f32803aac3adf2ca75c5c751c8cb440a2949fb3589df003c17ac32
SHA512

27a0b658409f96fee2cc8c7bf9ea60c33628b44462a67b837fb51325c8f77ad3e36613cea6beb9346d87098c07edbb063cc158aa7778cac54d8348ca045157f9
SSDEEP

6144:WPrO71BS1swl2zzCjoMzmyF3/gh5lig8y2qesrGMR0EPdS88OKIVO4/Mg7a8a4jr:WP678SAodyuh5lirGe9M3w87V/7U4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OrderN.01730.exe

Files

OrderN.01730.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ