New order - NLDB-082[.]zip | Triage

Sharing

General

Target

New order - NLDB-082.zip
Size

50KB
MD5

486844914217ddb16316fc2a98f4df28
SHA1

84d007ade8d4c30a875fe56c0312bf2caa27174f
SHA256

384adb13cb02e0677fa9c4c257d1a73dd278f2b851b9bf68e023111e4f312fc6
SHA512

1db0731856bf2eb00d1264763a3e0161655e5106ec56648508b0c86b13beb2d92ac42f7564c97c3ef00b0e5f10302326ada882c722014aab78103bd347c4ce4c
SSDEEP

1536:Z+MMWpbHAVQeIlEnsa01GBMHsY2Em2IRiO:3MW1HAGeIlEnsX1G8sLEWRiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New order - NLDB-082.exe

Files

New order - NLDB-082.zip
.zip
New order - NLDB-082.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ