NEW ORDER[.]r00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW ORDER.r00
Size

564KB
MD5

954f1d4444f27b008ca5a633be7dacc6
SHA1

0eec2cc20d60761bd33676339a2d4eb9b63160f1
SHA256

67c710085ffd530761158795ef67e1c0219c263e1a1107ae2f44aeec37d5ad8c
SHA512

8fac723e140f33cdd78440121fbeb5b7f2feba2303a5076f32cda97f6d447d1bb67562451dea2052da6ff55dd685b9d4bc6e12586f0c6831165966f53b53b59b
SSDEEP

12288:3PwB1POGQBnLB+cD+j2N5yYNRVk6r/tjSZc+9BTK7yZj5Lb:3P4WG2+cD+kQYNRVkW1j4Hm7Uj9

Score

N/A

Malware Config

Signatures

Files

NEW ORDER.r00
.rar
NEW ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 733KB - Virtual size: 732KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ