Ordine_nr[.]24061168372[.]exe | Triage

Sharing

General

Target

Ordine_nr.24061168372.exe
Size

1.0MB
MD5

66ed2f1b8ed4f58e0cba9e3040a4aa7b
SHA1

675db2d60e56f8bff3b1b3ec595b8949615dec03
SHA256

3e21e139da2602921d760b944c7d568f6d66cf7b5fee21cd506c3a1acc0da729
SHA512

849bb30691dd35cb98c96111dcf624c53fb5c91070f9d1b14ff060c7150824304a8768571b735809c91b0ce88db995543384ef73dafe3383f996f9b7668adc62
SSDEEP

24576:dMm5SH6MIl3LkGDhsmD/U0FMkJsNYM7QrJtz:dMm5Lnl7kSU2qnQrJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ordine_nr.24061168372.exe

Files

Ordine_nr.24061168372.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ