New Order[.]exe | Triage

Sharing

General

Target

New Order.exe
Size

725KB
MD5

741d55cbad3656ce1d439f00d80b551d
SHA1

876a9f3677dcb740f096a6c90f1a8fbee930fd3d
SHA256

62f8a25d4004ab00392eed751610158bdceaf54359f694564310226579a2cea9
SHA512

b2db7f0dec3d1fae55197db2a0b90fd989995c13e118b82659e5739d263332e19a6800a99e49d33ee6fc2e44be9ce5f188f2360a6f6b9221071089e58feffc63
SSDEEP

12288:9xAIdvqXPVxcHD6+pBEpApuw8im+wLE9BPqRU8AvSljSl:9xAIBCVqHDFpeA2iBw6qRDHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Order.exe

Files

New Order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ