NEW ORDER[.]exe | Triage

Sharing

General

Target

NEW ORDER.exe
Size

914KB
MD5

0a9b021dcf06e963d9e2c67c42e72c7e
SHA1

b8f64b28336309457e69c0cd7469c2537096caee
SHA256

4ef1e5306c8b498a224a90dfc72feab99b888cd0cfd21aa017ba77e7871ae03d
SHA512

61be0d876a7dd918854e55da1c7cd59e32d64d394e5608b9a90a974deadf932ed568724543842437f63d6b38c609124540b53d069f8b22a6da0290d066ced0a8
SSDEEP

12288:TcVXiTB2QwkmlxfdeVsvARS5PkCPHgbzHRUNAoGtE8zpx3TzN0QeD2h8p:jhtaIRekCPHY8wtEOpx3Tz82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEW ORDER.exe

Files

NEW ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 912KB - Virtual size: 911KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ