28022024_0322_27022024_BELOR_ORDIN_N[.]2302153[.]iso | Triage

Sharing

General

Target

28022024_0322_27022024_BELOR_ORDIN_N.2302153.iso
Size

962KB
MD5

bb7e07fe25b560f10e3198159e9acfc6
SHA1

28c1b5f5ff75cd00b3bf61f0f19b85a2e243ef52
SHA256

22680b5f15f14ab018267c22a9d1027c7a4daa958a7d052e9e6ad8dac8aa927e
SHA512

29cfad054f76afb2cd65a2dcefa71c63d3ebbcd27aeba0a67f43c81d5c98b79fcf4d0c6bae16444065e0143982ce5d729af36ebb99c0ed918b4e79f940318904
SSDEEP

12288:4hJZQ37wn//OkRjVLRZYmL8X63TcepY0/oVS1K+r5JNHrU320WrM9uOAHn:kJwEn/BRimL8TqAVSg+r4yA9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/BELOR_ORDIN_N.2302153.exe

Files

28022024_0322_27022024_BELOR_ORDIN_N.2302153.iso
.iso

Password: infected
out.iso
.iso

Password: infected
BELOR_ORDIN_N.2302153.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 899KB - Virtual size: 898KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ