order # 23HTH046[.]zip | Triage

Resubmissions

03/11/2023, 13:47

231103-q3wlzsdh76 7

03/11/2023, 13:14

231103-qgtv9sdb88 7

Sharing

Copy URL Twitter E-mail

General

Target

order # 23HTH046.zip
Size

1.1MB
MD5

4ddb38b1d1483df8eb4c6efb9192c90a
SHA1

84fdcfe18819639de21e81433b7fcc4d863bf182
SHA256

cea341e6f529691807001f12f417a7c8a542ee47b9d320d88a5a413ade62445a
SHA512

b7a6aa27198d932e7dd585449f4c8e3d1c371681b944d5c91e9c7df92c225bd4bf1eb57ac89d06e93eb071251d734b7dee88db30ba6d35a1cbf534d9e470d111
SSDEEP

24576:g5iSHX81GyR6l7Pn6QBxNuX6HCqvmVKzfiIriJF2CKUljP:uM13Ml7PJ4cd1Q2CHlb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/order # 23HTH046.exe

Files

order # 23HTH046.zip
.zip
order # 23HTH046.exe
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ