New Order_Purchase_202401017[.]exe | Triage

Sharing

General

Target

New Order_Purchase_202401017.exe
Size

789KB
MD5

48ba025a37787edc3a221155a135018f
SHA1

91ff3bb3bfe316d4c7811ca899bc47323210c266
SHA256

d41fe3fc605a799e6f95c52cc16d35a2f1bc03fd166187a1c6fd830f287e3518
SHA512

99c0be7ef941a2cc1a20e217d295b7915dfe435f6a97644d23810e3056922c08936641398bcea45401ceb5559441df8c5b1ef45417f5b466a425caf6bcedf7a2
SSDEEP

24576:WJcu+7e6zsGEDFZeKtjfib4t/uPkSgNopI61RWBY:WX+gGQeKtji8BusfopIcWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Order_Purchase_202401017.exe

Files

New Order_Purchase_202401017.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 778KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ