orbit_v2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

orbit_v2.exe
Size

925KB
MD5

d8ee15e160108d9e9d8945c6217c1ec6
SHA1

0ef46012d4920417a201c762d2e0842d6337e1ca
SHA256

3bfbd5253fa50f399d324b86ac1d1c88dfd5dfb71463d2a6966686d8b6fea44d
SHA512

500dfac073b10c9758d3bd3bcfedf6ea3ecb49e7dfbe9401e6705797d5fcab96e267a06e55a9611757e22809cbf179e9d8db6c6aee0141f91e5a00ca4f3ded3f
SSDEEP

12288:dNbo0qgmcCBvo1H9vLMdxjqsk0QtolQi0ESVt2za6GQBR217AMZ+gR45N2tOCvn4:dxQBgXvMQyt0LjImm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
orbit_v2.exe

Files

orbit_v2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 922KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ