New order[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New order.exe
Size

553KB
MD5

32b51af938a9dd76609407faf862d18c
SHA1

bf3c35c840403dc7fa997630457615a2a417d20c
SHA256

4a30ba2e0012dd756f7d6fab584e78fe144a306d134921502819330a6978d328
SHA512

2fa1ca41674c5f23cfae67160d4fc08be01580de75e6f89b76eca57f8a6e42f7be4b253aa0e605f7a459449b31453e53882cffb4df3b6be66ba444dcb132f631
SSDEEP

12288:RqTrQaSejL8Z5w0dpl5gsPyaHjBb67IwfEKr43XRVY86YSWBlvhB:RqTrQaSejL8Zff5gwy06IwfEH3HSWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New order.exe

Files

New order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 550KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ