Static task
static1
Behavioral task
behavioral1
Sample
order Depeng POORD20231109001.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
order Depeng POORD20231109001.exe
Resource
win10v2004-20240412-en
General
-
Target
71332f3996b0c54f0bcd5fb19433e7e4ca9068fc73c49af3eb260589053e5f65.7z
-
Size
254KB
-
MD5
617bc573391b773063b7557638fa47eb
-
SHA1
e2ab0744b9d84458e8f283c884b0d7cbdf42fcee
-
SHA256
71332f3996b0c54f0bcd5fb19433e7e4ca9068fc73c49af3eb260589053e5f65
-
SHA512
7ff582de8a9b4341ec7a7576adacafaa498dd3f15988dcfbe46ee3af1f8d6449b985361777106fd7025a079ba7fbead4e16a1b74a6b826cb1c5213a76312bf20
-
SSDEEP
6144:/y9BouyWrr5bDRPbx8ImDlEbxktQ7oSsupLnXfCB4r:+BhRDhqGCfK7fr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/order Depeng POORD20231109001.exe
Files
-
71332f3996b0c54f0bcd5fb19433e7e4ca9068fc73c49af3eb260589053e5f65.7z.7z
-
order Depeng POORD20231109001.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 337KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ