Static task
static1
Behavioral task
behavioral1
Sample
ORDINE01524YI.exe
Resource
win7-20240221-en
General
-
Target
ORDINE01524YI.exe
-
Size
658KB
-
MD5
eb9ea4ce72001959f3aff4d195507967
-
SHA1
700fc1ac0202555b866401575efabbc08c52d4b8
-
SHA256
239156a7ce34c37d0d9e99cabd65e5f9b9bbef88f4b00f53f1774bcc97fe1614
-
SHA512
4d878aa17c061a673cdc564ef0f5ef9db1e37e181477e20bd3a4a9c23b5cc49acdb288a9b9b7ad73910c85357a3b9e112c02341b9f8b99d277eb1796bbd813a1
-
SSDEEP
12288:IO15/+qvuJMSwG15k29pYgHOgJ6d8fTFIXB3V7CTprfDIif:IEuMSL122MgHV6YTFIXz7CTprfDj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ORDINE01524YI.exe
Files
-
ORDINE01524YI.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ