fcf919b416c7ccebd2372fd341845df8d4a2abe339c7806816b4866a2ab74ea6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf919b416c7ccebd2372fd341845df8d4a2abe339c7806816b4866a2ab74ea6
Size

756KB
MD5

7f6b55a444179efd3d91aebb3df97c33
SHA1

91b8c80f314ace1647d593416d301f4703da8091
SHA256

fcf919b416c7ccebd2372fd341845df8d4a2abe339c7806816b4866a2ab74ea6
SHA512

f65662b7bc2d03227d1c7c0fb67e28a632404b65cdc65230f5d0b834cd1ef1daf9cf441051b5365e89cf4da6f3a2fba7c0f937446a3b26eb702ad8c4bcc20e99
SSDEEP

12288:tNziswnkBwKwK7UqPhgqnOYg0vUJ1F40h:ttisBGK7dyqnebh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Order Specification.exe

Files

fcf919b416c7ccebd2372fd341845df8d4a2abe339c7806816b4866a2ab74ea6
.iso
out.iso
.iso
Order Specification.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ