74c5818c3bd47327115ed35e54e29b39b513b96335da5907edab19871bc543a4 | Triage

Sharing

General

Target

74c5818c3bd47327115ed35e54e29b39b513b96335da5907edab19871bc543a4
Size

558KB
MD5

52e415891c8f97e078fcaacad5ec8bf2
SHA1

fda798518d5e69422a179920613ca572ece8c4c7
SHA256

74c5818c3bd47327115ed35e54e29b39b513b96335da5907edab19871bc543a4
SHA512

416dfb906fc6f7a0948c9c77c2ffe538662bbe68ed8601283198b789f2c5882202f96749826f347c5f4c1abc77511a9351dd0ea4e540b44b4a89a936f7afccb7
SSDEEP

12288:VkmDotxpuHBww+jiMklr0jOeG3tRj7b/ZE0nfaSNATFkUIl3+AB:m6otLiCizr08rnST4tB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order Specification.exe

Files

74c5818c3bd47327115ed35e54e29b39b513b96335da5907edab19871bc543a4
.zip
Order Specification.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RyGB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ