rOrders[.]scr[.]exe | Triage

Sharing

General

Target

rOrders.scr.exe
Size

810KB
MD5

1feb066e46d1beed60404a2a6adb3d5a
SHA1

a8a8627b651f037647294992cef1dc0924a6abbb
SHA256

2553adadd29af4148be4c10f1771573b149006815374121bb802fa7599ab06f4
SHA512

13adac6a8aafc03608d04951f551c21a723081f800d311f4ff2061d145a6fe6a751a5ff69e42d980ddb8ef12633a846f92d3919714c8626d16d6fa61b750178f
SSDEEP

12288:paMaSzOKy2r7SPN+3TzXhMlJ/AeHvC/yj0YVYdjTLdUR2:wMaSSKy2/SPNUbhve6/yyZTxU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rOrders.scr.exe

Files

rOrders.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 807KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ