Static task
static1
Behavioral task
behavioral1
Sample
order2024.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
order2024.exe
Resource
win10v2004-20240226-en
General
-
Target
c084e38270b9f3091763a85e59ae7e2700cd10f0604dc422f5861328191e8ee3
-
Size
249KB
-
MD5
ab84ed23375f829dccf18a26de97b8eb
-
SHA1
d746a2e46f4bb94e5eef0b211052c81aafbdc80e
-
SHA256
c084e38270b9f3091763a85e59ae7e2700cd10f0604dc422f5861328191e8ee3
-
SHA512
4ee09abdb3fa3423cb9290856ef395665f13e1aa0f3ba814e1fadad76ff68775b6ca6ba16d5c264c86ef8f4de29c33ca2c92f3bc39ede0f316820d2d3b8f9811
-
SSDEEP
3072:g9wX8Hk2NQhlh2BedXWhtD01BcKkBwIaKYX8y7UpD92CuUMDW21PnBhJyyFVuHGB:Dl1lqimG2K2l9P+DWs/0yFsDQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/order2024.exe
Files
-
c084e38270b9f3091763a85e59ae7e2700cd10f0604dc422f5861328191e8ee3.zip
-
order2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ