ORDER_CONFIRMATION#265363[.]exe | Triage

Sharing

General

Target

ORDER_CONFIRMATION#265363.exe
Size

672KB
MD5

56ebc8727215602835c26b7598e00d28
SHA1

0ea697234ebfa3d1b6c0627773c00317767ef7f3
SHA256

28d1590cf51314a1984837527236561d5fe76379da748d464d4672c092e01b41
SHA512

d224ee6ed9d82da4c0d10fa448a02642761b2d93b6f82bfcff1165a26e3f8d0147195143a64c354b2dff70e0093ad0902c249d92652d9ec6d07b4e046ff6c9c2
SSDEEP

12288:hJX3inVFaAA/PowR0nI/9wc78+NjRrGIRA4JvfwkIMuk0HV5IrkNnVmEu98d:332HFGgwR08m+fdrHRA4JvUbtIrkNVo9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ORDER_CONFIRMATION#265363.exe

Files

ORDER_CONFIRMATION#265363.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ