Order_List[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order_List.7z
Size

532KB
MD5

24b15934fcd661e0807d37480eebc45e
SHA1

af2b9de67903b1f16fd845854ee5f0c904cb5de8
SHA256

7f171642a61828eadca7f9f4c607d6a74306fbb8cf19b5c29d9e8ec6f8f274aa
SHA512

8262cc440191d35642ab9cc0de13791964ef1204e2687412952c4c63baf05c9472f5d175c717b65a9bcfe134f73276782a7c0883eacbd56e7ca9cc21b5877cab
SSDEEP

12288:ALm64v7N56PsoUkqnkGZe0uukVfRJft43gOKYoaD6wtf+gZvOh:AN4v7qPs9kDD9zDJf23g7baD79+qO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order_List.exe

Files

Order_List.7z
.zip
Order_List.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 965KB - Virtual size: 965KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ