Static task
static1
Behavioral task
behavioral1
Sample
Order Confirmation 10184.gz.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Order Confirmation 10184.gz.exe
Resource
win10v2004-20240802-en
General
-
Target
Order Confirmation 10184.gz.exe
-
Size
3.5MB
-
MD5
df2ace5c6db82428462e74d47d0465bf
-
SHA1
ad0284fecf66d6b740fde18c1929aeabd8f3c83d
-
SHA256
eda27c1bb7dbc080b1db6b379e99b435a4bece82d82ac57265fc46e4998ee387
-
SHA512
153035ccb7b7bcf94367717cc4fbe70947bf4de5de33b5fea673e24348e2e0f0f9381b73c47af1f860c12e00b49cb7f058f053415b08e716fd3b087a4b5a01fe
-
SSDEEP
24576:ULBjHOz3eHyTm8o0NQVwDigJIeOjBKw31I:UNLOz3eHyTm8bOVHuOjBKw31I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Order Confirmation 10184.gz.exe
Files
-
Order Confirmation 10184.gz.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ