Static task
static1
Behavioral task
behavioral1
Sample
ORDER .exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ORDER .exe
Resource
win10v2004-20231023-en
General
-
Target
ORDER .exe
-
Size
629KB
-
MD5
eb2f591acac53896a1df1d89272edd11
-
SHA1
5dfbba637130a1661843cfa1f01c9a2d5545cf03
-
SHA256
ac22dba1c1ecf6ae0fa1a41e1d026ab28767e68d1931a014036875b97463f888
-
SHA512
ac3215c5f2506aa90329764005f314cc5857470bb8e3ae553fa25c17a2c69f10e3857a763e418d3296ac5a975c06752c4994c5846d3877e0e5bc65fd168f8258
-
SSDEEP
12288:+sxTA6qUPoHydAjoKX/11yEKVK4hMgD5cFd0bqAvfkXIMTMEcGRH:Bxs6cHigX91yEKk4hMgD5cFd0qAvel9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ORDER .exe
Files
-
ORDER .exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 626KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ