BrnR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ORDER.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ORDER.exe
Resource
win10v2004-20240709-en
General
-
Target
ORDER.exe
-
Size
770KB
-
MD5
077c8721d9f345c7f3b7512bd8d5483e
-
SHA1
bf22852cfd3b128349cd6f0fc0c49428681ff531
-
SHA256
74e8a854e2e2a48e678ee05c99a41de5fe5e3c7138c92b4ac2331c4a2043e826
-
SHA512
e05786688e44567c191e68d58db19dcc70586093cd493576a321b997786fa034a4082cf7e21ba7ac66a6b2dd091842597430dd501e08e3e980122780765763fe
-
SSDEEP
24576:NXRv6zaOmXis4OTd3A3QH4wftJRM8cNyQEWD:pJLOGisnDjr7chE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ORDER.exe
Files
-
ORDER.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 767KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ