Unpaid Orders[.]exe | Triage

Sharing

General

Target

Unpaid Orders.exe
Size

714KB
MD5

a8840ab3795a9da734322e577d8562ea
SHA1

479416944428b322eb81421535f457803088404c
SHA256

dd64934df95a8678e303aaef7b1b8b58caa68a039e3f50788c7c88f408e93432
SHA512

03d861f734650e0a8c5c2274008cdd94b13492e56f069ade03eda95b8f0615dce8fd5d70180a0f91cc30e36a52b88df08c26a9a9f8d082213bce95c94023331a
SSDEEP

12288:v6UZhF9WMHm+v6yNjd7ooBjGBXkn0LjphnNfWeqUF16IreRZs:yUb2MG+ieFoY651jphnlFqs/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Unpaid Orders.exe

Files

Unpaid Orders.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ