2dab2e5234abba5d7e212f26486b3a0fd712c16ecf76b18d8720974df0b197b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dab2e5234abba5d7e212f26486b3a0fd712c16ecf76b18d8720974df0b197b6
Size

733KB
MD5

ad94fb2a1973655ce6b52be5bfa51b80
SHA1

6143d47fe0339e901396886f871c3d27b630426e
SHA256

2dab2e5234abba5d7e212f26486b3a0fd712c16ecf76b18d8720974df0b197b6
SHA512

35ab110b051411ffbd08ff5790afa28021af0d642be05509557f3252538ec5ec4c7423af41ea72911629c210cce73e5d57de0d27cb9cc54746b1d9c42f0f9d79
SSDEEP

12288:HiFXoaGN+pAg70ejn9ftTy607eRuV8EtCwZSGt3OxlK+yrGMZ/g3PsX3+POZ:HsXo1rHaDk8EtS8r+yrTlwOPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OrderList#997501.exe

Files

2dab2e5234abba5d7e212f26486b3a0fd712c16ecf76b18d8720974df0b197b6
.zip
OrderList#997501.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

uPGG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 831KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ