Order Specification[.]exe | Triage

Sharing

General

Target

Order Specification.exe
Size

746KB
MD5

144602f926387c40adf4be23409ad855
SHA1

b0611b6ecc6659373a16616af5907244c7e0adfa
SHA256

12c242cb8567a6767775285e0bb313ec8dbbdce5155ec93a0cddee50dfbf92ef
SHA512

b1f22c93da44740d87ff29d0a2b155f91ce87af3059baddfc663e4a42eaf03ae491802de2da6bc3a893a854cc122891db7e0fb8706165ff83d2a56608e24bb82
SSDEEP

12288:NzSggsi/kjOXL+jD6nqppjPKb8setZxmfIj7bbZE0yz:NzkRLCD22jir0ZsyUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order Specification.exe

Files

Order Specification.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RyGB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ