Order 6189[.]zip | Triage

Sharing

General

Target

Order 6189.zip
Size

529KB
MD5

f37888019d9b0af8fde3f789ae0440ca
SHA1

785477513deef545236cf6894438d99c25d3400e
SHA256

912e5b4ad70b5c69ffd18fffd98dcca8c95c35b7a9969f818d9fb9c2ab14c284
SHA512

b0e86f61d5ca9ebbe2b1f528f22e19cc0f99725e3277c398a7e7fbaa1670cf39c848ee60b407be97e9ca4fcb68c388e8d41de80c2f604bfa37f3c8b0f5c66fc4
SSDEEP

12288:nA+o1zEOdrxuLUEYwUhUZpAtLEgBY3tA29seoZqX9AYtFI9z:no1zEOdrxoUEvegggn9IZ/GFez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order 6189.exe

Files

Order 6189.zip
.zip
Order 6189.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 530KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ