Static task
static1
Behavioral task
behavioral1
Sample
NEW ORDER 87012_PDF.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
NEW ORDER 87012_PDF.exe
Resource
win10v2004-20220812-en
General
-
Target
NEW ORDER 87012_PDF.exe
-
Size
804KB
-
MD5
c1a1c5d3e6d5814a30314822c7ccda0d
-
SHA1
9254c500a0be23c876ab8ca9f1c644600df0bb47
-
SHA256
913f5087a80d070cbfe31df2c4fa50236b663b13d29c33d3b4f59073da4aa80d
-
SHA512
d740a2c2c7af28c571744236043980e93ff0892cc50874e62ab27c4844f2ae0792c76df284b1e3590fe424dace79047ccce82f4e45277c7f2e9d112cf42ae50e
-
SSDEEP
24576:P7gm+L74mBfNUstzorFy4OaqtHKAyYFkVRFwHvQ5ywqp:PsWFBgIyH45yT
Malware Config
Signatures
Files
-
NEW ORDER 87012_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ