Order 6920881572XX[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order 6920881572XX.exe
Size

661KB
MD5

3b3f90b337074c5a257fe9e6e1522aa5
SHA1

1bc33ee79fdb9a466108e783c09a10162a6384d5
SHA256

c8e4eafceefbfd198b731b178f5cede0dc2cd50e31513d96eef424bf3e31455e
SHA512

381f5bb6cb605386e82c783da129b8318c165d7955e92058891c2f0d8543e5a8fb1b21bab478d83addc994e6ca5e33a6254438d499e2a7932cb395fd725c45c5
SSDEEP

12288:mzNwnqs3y44sAGi7gZoHOdjMzeaWgfgAubqZy9ucCohox+FF+1XhJhn/:7nPAGhoH6joW2ubkQnhoga1Xfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order 6920881572XX.exe

Files

Order 6920881572XX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cOaG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ