New order[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New order.zip
Size

536KB
MD5

f519f9bbfa396b6f88af50da46f958fe
SHA1

b3b17f2b22349c17788a6305f760d21faa68aa85
SHA256

eeb73653e55a86b80c9fa58f72c28c17053f230bb044115433dcd51ecdddbe3a
SHA512

4f44ed5f2fbbe69c761558319c955a3d7dc9e9fc4ba4794abdb5be0c8cbb9f5ff930b552fac2a36851f3c6762f2a7d4edcd541732ccc745e55546cbfa6fe0cbe
SSDEEP

12288:MzHuNswEOOOgaBleyjv+4Apqy3fiZfrgDbl:EOahOgSQsSfEcDbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New order.exe

Files

New order.zip
.zip
New order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 880KB - Virtual size: 879KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ