New Order[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Order.rar
Size

425KB
MD5

0d38de2d9dc5b032529ee6d20c37a1c3
SHA1

aff46d5d26d0a35d1ae85b3aba909d6da868ef24
SHA256

9be454135990b9f3dda107e5686a6b32e214bcfd574cef2f4829fa4a7de295a4
SHA512

003520cb79dd76a63caf69a79c5186f498e8a9342cf278ea3ed741680c25ec89b3b6f7d2b0a2670966a09712f1ce3132835e8160531b966e284487d0ed7d7cc6
SSDEEP

12288:3kZfpiNdQCH67Z9UaZrrCPCAt5G7wwvjk:0ZfMTHkULPCAHGMwvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Order.exe

Files

New Order.rar
.rar
New Order.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ