cef54286ec03d930f114608c90e966cd505e91878c5cc536d760626bf49b80ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef54286ec03d930f114608c90e966cd505e91878c5cc536d760626bf49b80ba
Size

640KB
MD5

05c71d1f071750782b40b11ffada22d3
SHA1

058fac0983fb9e2a4add2373125b5e9a65d07412
SHA256

cef54286ec03d930f114608c90e966cd505e91878c5cc536d760626bf49b80ba
SHA512

45656695f2ed7cf55ebcbb84717fbe5ab38ba61d106de8ae93872d758b1a154655d94e5401000e245aebc48cb7ffffdf7223f5ac7466b827267b128aa6717b6b
SSDEEP

12288:vjcTNL9OKLclimR9mzMOS8Am2UlIZjyZYPfaDQRJeyZllUw8ZVUk:iNRtLclvR8oOS65kakZzgZF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/order`.exe

Files

cef54286ec03d930f114608c90e966cd505e91878c5cc536d760626bf49b80ba
.zip
order`.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ