Static task
static1
Behavioral task
behavioral1
Sample
Orden_33889/Orden_33889.exe
Resource
win7-20240220-en
General
-
Target
23052024_1507_22052024_Orden_33889.7Z
-
Size
625KB
-
MD5
2298061ca5dbaf2b574fa64151cf20f1
-
SHA1
d0da3c25d1075d2200d4d18290716136dbfa9bc4
-
SHA256
b49c041092b73c9263665f9aa021e30a3c4f0803d6a787d193e0293210b3b165
-
SHA512
45a6b9031b029f3964e002d2e7cbeca6ba77f107d0611ab89c0bc91bba392043adf2759f3ed3e69adac409192bca1730a4efd89e3764f737cfee2724df273d5a
-
SSDEEP
12288:j9hvt0mezhKBNa26aDxNyYvV39mGlmO1VDTvKY9U4ws914x2ZG9YaO3Ogw1W25yY:xhvthNrNVsUmYV/vF5W289YakOfW25/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Orden_33889/Orden_33889.exe
Files
-
23052024_1507_22052024_Orden_33889.7Z.rar
Password: infected
-
Orden_33889/Orden_33889.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ