Service Order - R2231226842124[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Service Order - R2231226842124.exe
Size

926KB
MD5

6ed12869d3b52b592720f8e8acd18366
SHA1

ef110131497b39717372762a1abb94ff2a5597bb
SHA256

b36de8ba9cc9b1d7a21f8597c6926d20edc4092b796f71f8efe216710d56b457
SHA512

84805f842d5d447bfee0242d9c7a2fcb783c16b50d6953cd08adfa91c62bd1529c571c32e477392992c00b0691b581730b05ab462952307d34c673c753418b94
SSDEEP

24576:vzOMurOFAaU6H8y64RJtgs6lMQxB0rSpiVHg/c4SUtHLAP:vzqOaaU6cyftMMSv5Hq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Service Order - R2231226842124.exe

Files

Service Order - R2231226842124.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 919KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ