Static task
static1
Behavioral task
behavioral1
Sample
PO 278198726- New Order.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO 278198726- New Order.exe
Resource
win10v2004-20230220-en
General
-
Target
PO 278198726- New Order.7z
-
Size
383KB
-
MD5
b9010dc0763ffeb6d816ea4b2ffc0157
-
SHA1
17f43c07298d44d4ffe4a409fd62c14514d5f066
-
SHA256
c7c3244c20d85777f3467b0e64b0602d6bdb59b807f39bdb24335363ebe3d3fd
-
SHA512
21c25c959eedd8cd8bf09296465fe4db13a2490ffbc8a6d3d00a02120ea2021e7b7755ebd321cfade0c7475b5c5959f47951945095b44daa0a32b4cd0dbff638
-
SSDEEP
6144:LDn+kc9hoXWc5FslUf4p3XoDWmJL0WmLX0C3eGt48AneK/JvoC+AgWIm4fjqSeQw:LDn+1omx2f4FY6mB0JXX9OhorWIm4bqR
Malware Config
Signatures
Files
-
PO 278198726- New Order.7z.7z
-
PO 278198726- New Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ