NEW ORDER[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW ORDER.zip
Size

707KB
MD5

bd9e29bc340ca1a697eb52d46f434aa2
SHA1

55c1d9650b5d049bc25249c53d527261a2efac8a
SHA256

4e51f0616df48153ae9a76dec9a194ba7710d13a419e3eb7b8e845832a41540d
SHA512

3757c03617fe14af2fade20c82f9239b603401ca98f38eacf82e985dae7ff1936e281f2f1e1b0bb9f30cb34f8c55321d3a224742174ce79ca7b5d1fd9f0ace82
SSDEEP

12288:Mpu1VHEalvTm+vCSgrbXzONgElhHmxt/qfs5euIMGagvuUeDug9xP1cbwBinJEEf:Mg1t3lmkaTS6EhHKRqk5ecgWUO7PyI6/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER.exe

Files

NEW ORDER.zip
.zip
NEW ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 773KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ