New Order[.]exe | Triage

Sharing

General

Target

New Order.exe
Size

826KB
MD5

f19d85c4e2ff2da0acad772d2c9fc3fd
SHA1

8ac325b48b211c0521a411d786ee2bfc0c8c3886
SHA256

85769aadc4608e599612aeea1554436f1a3f0c2c4cf88c7a597b690061aeed6c
SHA512

769e9afaeea926ba2c421f1fbbefda1435e02018d6da8371ef8446f6d2b4cf48448a36ab76c4ddebcd02c80a2ed8b23e8c74c678b0bea53e55abedc9c40494cf
SSDEEP

12288:rEKaJvqAye0xf76gbWs3Y9rJTuY0/gVCrpdnCNKiq5E+8:CqtxRbXY99uY6goC0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Order.exe

Files

New Order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 823KB - Virtual size: 823KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ