Static task
static1
Behavioral task
behavioral1
Sample
New Order.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
New Order.exe
Resource
win10v2004-20231023-en
General
-
Target
444bcfbcdf9e927948f5c18484aa809089638f3a8e0ad4e174c4612dc13f4852
-
Size
594KB
-
MD5
4d962c7113a94d156e4f0d77b8177129
-
SHA1
0a1e894f32202852fe817762f67455c6e7f56d44
-
SHA256
444bcfbcdf9e927948f5c18484aa809089638f3a8e0ad4e174c4612dc13f4852
-
SHA512
b6ab9e2785889cc40cdad9b91ff89681d9e2356fc51c944e03612b6088b34ab126e0349f82bed6548e24535059162accffd833b896b54760c3475c301b9d9cdc
-
SSDEEP
12288:Cu2y9rn1Zow4+p7oan3fb5lyeHCHdjFGJyjIVbpu/UgUOcFYY:TT1Zol+Roan3ftMeiHiy8VMUIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/New Order.exe
Files
-
444bcfbcdf9e927948f5c18484aa809089638f3a8e0ad4e174c4612dc13f4852.zip
-
New Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 609KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ