Order Service[.]exe

General

Target
Order Service.exe
Size 786KB
Sample250414-ecs8dsykw3
SHA256 b65fece07c855ade193a6b6ef01280298c587c2b1c4fd9a4959bbb3567155da9
MD5 c1c09d0f46eb0357838c9b10609c7dc3
SHA1 f3474c689e44089093597659c0087a4ba425725a
SHA512 8ede1157f9b14f8102c36190384aae2a80ed4e9630fce48defa0bd4523236f10353643232a3d02320f4cb1f1f38dfdef7770cc0571739e21c077d1d98a100946
SSDEEP 12288:+tKilaay84PIPGtW9njxS+SpbwLuSklfFjiE849Aa61m+NH6W1Q7M3njoQ8PJLU:+vlaVwS4SLpbnlfME8421bNbQ7Inh8l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order Service.exe

File Explorer

Order Service.exe

.exe 786KB

Order Service.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b65fece07c855ade193a6b6ef01280298c587c2b1c4fd9a4959bbb3567155da9
MD5 c1c09d0f46eb0357838c9b10609c7dc3
SHA1 f3474c689e44089093597659c0087a4ba425725a
SHA512 8ede1157f9b14f8102c36190384aae2a80ed4e9630fce48defa0bd4523236f10353643232a3d02320f4cb1f1f38dfdef7770cc0571739e21c077d1d98a100946
SSDEEP 12288:+tKilaay84PIPGtW9njxS+SpbwLuSklfFjiE849Aa61m+NH6W1Q7M3njoQ8PJLU:+vlaVwS4SLpbnlfME8421bNbQ7Inh8l
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

800750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Order Service.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Order Service.exe

mscoree

dotnet