Static task
static1
Behavioral task
behavioral1
Sample
New Order.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
New Order.exe
Resource
win10v2004-20220812-en
General
-
Target
payment swift copy.zip
-
Size
601KB
-
MD5
2a38604bbd4d52a1be593657c0cdb4cd
-
SHA1
2d81567dc977554ebca82952d74a105fea5c5449
-
SHA256
d9acb802b8df81db159e5bf1516fedd25ba47e5e23aed5602c25624eb097de4f
-
SHA512
15af058872f214f3ea58b2b9a12a921463d5c0007acc37ac5dcb441bcc3583f800e8333fb438d16d57f5c0e67f02e3ffc0cc78e01299ce76cff8cf2f0f47200e
-
SSDEEP
12288:U0FaTq1hNobdDqq8bhASWpCedsgjtD5Rs30pPWZ+PB:fxNobpeqSWsQtxD5R8yt5
Malware Config
Signatures
Files
-
payment swift copy.zip.zip
-
New Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 757KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ