AWB#ORDER-544-0710[.]exe | Triage

Sharing

General

Target

AWB#ORDER-544-0710.exe
Size

746KB
MD5

30aa40cfd441ee5808681bd0620c67a1
SHA1

53a7d7b52cecd8c11838df6be95450c0eed9fa7d
SHA256

565dd0687c5447e3714250520bc29577e6516b8bc597067ca0dff05274896b4e
SHA512

9ced91064a9314eebb52300b70dc797b1831867ac67a5bc3d45d85809c071c29852ec1f9e853f351a107cc70cb0d561883b054660e615bd718dfdd40f46fcca0
SSDEEP

12288:ozSggsivdusjuJXSs9NAaxsF2XxrAVyhtKKsv/GPBsf61QPH:ozC8hJXjyvVIKoBsf6G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AWB#ORDER-544-0710.exe

Files

AWB#ORDER-544-0710.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DULn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ