Ordine_100078670008860000052[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ordine_100078670008860000052.img
Size

1.4MB
MD5

86973dd14397c79a1f1ffbb79d948a30
SHA1

ed2e7b71e3a46945976e41bacaef085d1973cc43
SHA256

ef49dc056a938178adb76b87f8ec84ee3c6dbf37d9058a609c5c399c592dfbf2
SHA512

c861250466f449b421421da94e78339a81e51bd67176572208288a57349d330e132bb5eaebac83814c41d4e5574a5b9d1064f5b14bf01c3843d7137cedfd2266
SSDEEP

12288:LnUAK2q5b9XjilseLYBhXrMeT7e7yIw9LNg9ZunLPKstytYyn37lrzdlqLPHTVH8:TU/2ges9re7lw9Wr8SB7lXvqzRHKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Ordine_100078670008860000052.exe

Files

Ordine_100078670008860000052.img
.iso
out.iso
.iso
Ordine_100078670008860000052.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ