Order Item[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order Item.exe
Size

35KB
MD5

c2a1db4ef5fc17e473d92bd7bf2b963a
SHA1

71a569a216280e6e3e8c222a97ef7bc51e79495e
SHA256

51b16d4b6d027af33896a71cabadd650cb4422fb0591dba9bc164fa96e5668f9
SHA512

d7f0ad28558d064714eeeda284f7a261fa4ae69bd62d672ea6504213d96bf9c6c28eaaaae824526fe6b016ca643e188a78d4be65af26e7041a5767d553094957
SSDEEP

768:WyNPSFY+M6N0ie4F1S4VbVyJsIFYLyje:JN6FY+M+u4iwbVOsIkyje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order Item.exe

Files

Order Item.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

~W7]]6+
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ