ORDECHO-DD230007A[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDECHO-DD230007A.zip
Size

696KB
MD5

537a4bcc8805f9b8e22fb849636a6f47
SHA1

c7ec68036361c0ba0ed7e2e499813c9c22b0baeb
SHA256

1934309ebd3475fd63004af36fc504f98338db2d79882a1f9f7e6ab7e062b610
SHA512

543768ceed385fc55b4a17c4003bb0d054e08b1a6434dee322bf91e9eb588c697e5d11f5b1f8b2b6b881b85c27477f711a0d6e47c48e798428c1b76bb5259e5a
SSDEEP

12288:cks7983RPXlqT8N01eFbgaQM++toGxBScQ3Apzx9EK0UIIMdxfDv:u7ehPVqT8NWeFbgaC+to843AlEjUdqfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ORDECHO-DD230007A.exe

Files

ORDECHO-DD230007A.zip
.zip
ORDECHO-DD230007A.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ