Static task
static1
Behavioral task
behavioral1
Sample
APRIL ORDER #344673.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
APRIL ORDER #344673.exe
Resource
win10v2004-20240319-en
General
-
Target
855161d6a02d4e406fd492bf569809c7be4edafb80888cf9147bf1a1f803ad69
-
Size
663KB
-
MD5
d5e2b9feb1242e7c913bb0f8b0d4cadf
-
SHA1
ef96dbe5a6ed0e69f2daf7a059a099a69262e1e8
-
SHA256
855161d6a02d4e406fd492bf569809c7be4edafb80888cf9147bf1a1f803ad69
-
SHA512
5b1bdeef4aaf50d44a41010bd4ab313b3f593701e4a5c79fb8969c33ac60fb9f9e26a6d8094b111673c5c69507e5f57c0262db13ff997d0388a2f468cb715171
-
SSDEEP
12288:yrzZzS4LjTdrxV9fbhMKCWedtyp6Aot1PnwV9FrGKK6KXEtJqb9NKRtSS:wZz7LjTdxV9fbmKbed8p6Aot1PwV9FCa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/APRIL ORDER #344673.exe
Files
-
855161d6a02d4e406fd492bf569809c7be4edafb80888cf9147bf1a1f803ad69.zip
-
APRIL ORDER #344673.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 716KB - Virtual size: 715KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ