order2024-10-07_174915[.]rar | Triage

Sharing

General

Target

order2024-10-07_174915.rar
Size

549KB
MD5

d312fcb5f0c8abc7186052e58ce0d620
SHA1

68d6c782c4c4d7a79bba6ca95c93dac537d5d055
SHA256

9030466c75ae8a42e6429d964711b5bf4c149ff458e004a95adc8a246ca27697
SHA512

1cfc2db051662df25adc58aff50d22704487215a37d1f05bc81d7a8874f2f3be38e22a6656d90f56a9da58cbf766d2b7253e100b236838c087210dcd8d0cbe35
SSDEEP

12288:eB4ERJm9TGe+txZMLcfgimQkMkza9J9h+X/Mogl09k:eBFRUJG3tz+cjRkMkza93a/Mrl09k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/order2024-10-07_174915.exe

Files

order2024-10-07_174915.rar
.rar
order2024-10-07_174915.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fSYT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ