New Order[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Order.rar
Size

515KB
MD5

3180cae4cf18257fbd88a00be0020a01
SHA1

49a27e627adc76fb3f0a4ac9d7545defd35cdf13
SHA256

2524cf59b7f9da45b48827e99b52a32c6764510e77594453dd2f1099cfe5cd65
SHA512

b326d8d3bcb28393e1c8353e31269a98f8b45e7332364bfb34fab01000c1e9322c0deff94eb2a2aa5e0b0c0d0923a38897730d51a46f612aed4d2fc8901383be
SSDEEP

12288:lYFOpDvl04u9TpCa+HR6EKiM8eoyzVEBYKgOFIP3u6:PDvlXmPh8yzVo3ce6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/osKPkU3OyAihkba.exe

Files

New Order.rar
.rar
osKPkU3OyAihkba.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 626KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ