NEW ORDER #20230926-00417[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW ORDER #20230926-00417.zip
Size

593KB
MD5

fd9ebc1498868e2c1422d220b4095e77
SHA1

93d79b576cdbbbd46f9d06043ae23bb63616f4e9
SHA256

91014d6415b1cc48013d65c3df878005ef426d865285fb091fab83123340c085
SHA512

b9bd52b1b463f7b530296ba198165c8025690e02d6241ce29c28f6322ad70c5f673622da4a77c6e2eacd36cffb47bbe79d7259e11e9de69f9ecc18d8b5d44659
SSDEEP

12288:FW/y6Bfpd7uGkKMn5h9Kx2pIFgbc6mB+zzJDCj3Vk++y5yoW21Z7Jv4j/8:FW/y6Z5snr8x2p+gbc6mB+ZDCbVk+Jy0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER #20230926-00417.exe

Files

NEW ORDER #20230926-00417.zip
.zip
NEW ORDER #20230926-00417.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ