NEW ORDER[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW ORDER.exe
Size

1.2MB
MD5

547f446f13d7f3af09d7b3f83b5726e6
SHA1

f1d263babd14c1da5160658e78449a9e603b906a
SHA256

3742d015944b9d924d6536d48fdc3ba2c7c60fc56b9a944dc8066800c4c2cb0a
SHA512

fb75de48102158dbde328f49328d86c2a9309f039484c0482f8629b4867e3e5467b6e5945a2bb6b356cb37defb376bfc175f6421d52e83cbcf48bcada56bac96
SSDEEP

24576:nZ5c3YgzZMBlPf9ioFU/wXRo4jJWUjHUruxvO3JrvvDAXY+mzo3bv:Z569UhflbXRoPyW3J+lmzM

Score

N/A

Malware Config

Signatures

Files

NEW ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ