Static task
static1
Behavioral task
behavioral1
Sample
ORDINE AR2330GTD 2023.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ORDINE AR2330GTD 2023.exe
Resource
win10v2004-20231127-en
General
-
Target
ORDINE AR2330GTD 2023.ace
-
Size
620KB
-
MD5
8364b2c89df04a4f640aa7e4065d62e9
-
SHA1
8b480e23d8a61f3dd3897e1589def586c3dfbfb4
-
SHA256
4bedf2bc1d0aab9174d20189412427e908bdaad29dcd26a13cb630ebbaa0155e
-
SHA512
49954a797482ee2cef144aee140946e5316a01b6dd97af00ab9fa91b57e2b63cd97c41de263285fb82565c6effee308fb55464470ac412bb8eab4881ceca9d11
-
SSDEEP
12288:62XVhO4lUt6Qwo9slch8DwclvOeNM58aemDfkhHD6kc0YLGgTp+JXL2gdX7ulT:JXHlUtTwnchrcJi8ae556x0KFp+pL5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/ORDINE AR2330GTD 2023.exe
Files
-
ORDINE AR2330GTD 2023.ace.ace
-
out.ace.ace
-
ORDINE AR2330GTD 2023.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ