B626A0AA7CDFBB9E1C86882D47AD73670A563AD377A605E9C1283B54255F7B49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

B626A0AA7CDFBB9E1C86882D47AD73670A563AD377A605E9C1283B54255F7B49
Size

1.2MB
MD5

b90c4bb54212078ccbefa3284f07e05a
SHA1

50babeee1eaa1788d2f1a5c4eaca7209cc4c7e32
SHA256

b626a0aa7cdfbb9e1c86882d47ad73670a563ad377a605e9c1283b54255f7b49
SHA512

9f12e6de150aefb351b127188b9898ae26e5563ddaca9db64b9cb10541035813cb2299593b7a0a4a71e31df1b373b131e967d95714923c78b8c32287a2ef6f8f
SSDEEP

12288:gzQ2KSW0+JJu4ZtdULCMUmvz4OrXX+I33u4I4ASLYAh:mKD0d4TpQ40X+74bAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW_ORDE.EXE

Files

B626A0AA7CDFBB9E1C86882D47AD73670A563AD377A605E9C1283B54255F7B49
.iso
NEW_ORDE.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 559KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ