New order[.]exe | Triage

Sharing

General

Target

New order.exe
Size

702KB
MD5

caecd32bcc0b7e065924dbf4c37a01e4
SHA1

eb5e5e14b83ff5259f5908de1179cba4f41fe3df
SHA256

0e77fc7adca97943ad5bca6f1cd20d05e80bcdda01b29087bf1d6fccd4379063
SHA512

7f4c4e9089a45eeaac87359e0796613d56c5fdd54e91bc5d07f0cd6b1253c8b34d3ad269c1b79d6799cfd1e1fba2a2ee46b69b5bd1afabedddb7d0813a0f11ee
SSDEEP

12288:zMqBG/uEspgx3NJx+FrfMzRWMZMYvXFt7F2yaKnS42klrcg:4qUEmdx+J4MuVtsqnxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New order.exe

Files

New order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ