ORDER231010[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDER231010.img
Size

838KB
MD5

36f6cf2f6b9cc7ba7d540651efd2de5a
SHA1

7a60e037d502072e0762314253d1fb698273ea9e
SHA256

faa6ce01c101ec77fc221ee4f0c0f0d5aeee00d0ba1610a1567ddd9f44cc2e29
SHA512

4ae414e5cbf666f2055643978197da5161e1a22af4501f63197bb661bb75a7b37ef738ee44c0d8545d9d14dbabd90d0846be406849e8eb7085b0ff3aef5995c0
SSDEEP

12288:EQS8rhUzt80TkT60z2QDLJ1Fj37xnprJiWn+bhgrBBLRHMHf:EtrwLJ1Fj37xnpN5n5TdsHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/img.exe

Files

ORDER231010.img
.iso
img.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ