New Order[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Order.exe
Size

628KB
MD5

1ac1f5282abffc5bac969bd4a6304e9f
SHA1

32b6c1d1ca67248a15950f0f8ea381f6614a1cbb
SHA256

1be417c3be0fcbe972e13bd2d3e4494e08a94bd4f572b361cadae3b88be1cc5b
SHA512

35254a3d421486af89de2cb26f1280cdd7d1c64971f8cb3465b56abc815186500d54742f54f5972930850fb6c6024713b3120fe55cfe33663f2dd7c7254e6b40
SSDEEP

12288:Tr8/jdufopBGLo/E3HCoUuEwJ5BckWY9Qtmfl8md67i/F6ivx2h6XP1BH:kL8fop3XHu75BbWH8mmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Order.exe

Files

New Order.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ