New Order[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Order.rar
Size

605KB
MD5

b4c21cfa442ee86619430404fd012c81
SHA1

f078d960a8d6b96dba35b7fdacd225edfd693051
SHA256

e7c7d2a08d208f10a260deba604541a10daa7e364670f4b063195d952f48133b
SHA512

bf2c06cdd9aba96eed37d9e3be56f30058dd9f92ac9829a0f41c17e8837c22bfff30fd6707bfbcf2e11397e7d9f8c5336163846c3597f7be0e341cd16301ddf9
SSDEEP

12288:UOpoVkmavIlBoWvXCRbOGus1vGDtFR5XkcOU7kUkaF+r:UOenUIlG9ROKvIFjUc17TDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/qS5h6uIy0Kcxw5t.exe

Files

New Order.rar
.rar
qS5h6uIy0Kcxw5t.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ