Static task
static1
Behavioral task
behavioral1
Sample
Products Order.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Products Order.exe
Resource
win10v2004-20231222-en
General
-
Target
715c87ffb0854681c7cc37d4f5914871
-
Size
901KB
-
MD5
715c87ffb0854681c7cc37d4f5914871
-
SHA1
27c63eabf989f5996e7b9f5c8d560c95ce9db7a7
-
SHA256
06c41ac3b1c9c2913aacf32ba3c4f21b0182b36db66b6e4d07e0ed610f98cfb6
-
SHA512
d94e6c02c765cee9f0a4166cf0e390858c5ac8977fd015697f01627e55193e89cb84dd515cf19e58eb0bba4c9063d4b9987b53afca3aa2298751fcc183371cd1
-
SSDEEP
24576:Z3G955hqKA48lpC17W7ry5zCf4NttomzxVL9Wycjq:khy3lfHwzC03FzxVhrcjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Products Order.exe
Files
-
715c87ffb0854681c7cc37d4f5914871.rar
-
Products Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ