Voyage Orders[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Voyage Orders.exe
Size

1.1MB
MD5

3f400d97f2abae8a447d88bbb47824f1
SHA1

1b33aa3560dea16c37f08a3c0dd3923f5132c921
SHA256

dd2bb6ea65c082f25a75158f22c2d10e3be1daa026334a8d8e06007bbd245f70
SHA512

12e530e7c6ecbbb865e81df9e077b29dcdae2503d99b4933c5570b435af1e44545a6a673103d12be13a95014662f1a6192bc673e1a1876abca555baef8db88e0
SSDEEP

12288:kdvgY7jTcqzDa8Zxu+Qor+gwbsFtswi5YBGqqpw35ZM2Jg7CTzvV2ucA:kdvgQtzDa8HZr1wm5Z9LTzvVeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Voyage Orders.exe

Files

Voyage Orders.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ