PURCHASEDORDEROFENG091[.]exe | Triage

Sharing

General

Target

PURCHASEDORDEROFENG091.exe
Size

24KB
MD5

30ecd7046839af0716977a9ef6047e60
SHA1

a1f6517726c9dc0f3d588b947e2aaeb4f849f58c
SHA256

472a703381c8fe89f83b0fe4d7960b0942c5694054ba94dd85c249c4c702e0cd
SHA512

7dad8ec1c5040112deee48ef6dbd56e7aac3db65dee11568f5e9fea96b33b2b6030f560c834ba51dcb0cb98eb837c2638e7f9c8b39c1f46395bd8259c88f8937
SSDEEP

384:zZizC2pKXg9eH58VkRS/oFGPikzhlZBBmBi1S0f9EKR4VWjs5anwNmJ8sxSvpphB:z/wJevBzM6RB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PURCHASEDORDEROFENG091.exe

Files

PURCHASEDORDEROFENG091.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\2023CryptsDone\password_generator-master\obj\Debug\Aewlani.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ