Order_N23021900341[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order_N23021900341.img
Size

1.5MB
MD5

494ccc8938daa1cf2d96f1ee8ae782fc
SHA1

c942a35c95888e57b1058851eaeb8e7251089b36
SHA256

fa03d4091079df15f3fb1b5106e04380628ffe5e86c383856a310156d5826073
SHA512

4c072b855a72b85a6a2aca1e4be08f5524582fb5885cf4c861556b0d83f2efa6872193f2495a77ea1928465bdc547fcb3436e622ad8d6cef4df728a9356feceb
SSDEEP

24576:w+oWErxRlbGpT7kI3g8n0XkP1kfvDgqxxR:x88pTwI33FNSbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Order_N23021900341.exe

Files

Order_N23021900341.img
.iso
out.iso
.iso
Order_N23021900341.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 953KB - Virtual size: 953KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ