Static task
static1
Behavioral task
behavioral1
Sample
New Order.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
New Order.exe
Resource
win10v2004-20231127-en
General
-
Target
New Order.exe
-
Size
737KB
-
MD5
e8cbd5675d4c737a5ae343e52f0d8449
-
SHA1
73b7079173f8f8086c049013cebda7d6df8e01ce
-
SHA256
ef5ac294d9362a9da60b52494588ed6e21b291acbecd15ab99c192d78add24f9
-
SHA512
ae4de1a8b3faae583c634b5f108eae96d72c417b5338ad8509d5a6eeb5c421573321070a794793af0496279751c96e7af471345141b50dc68dd4f4b4ae2ff73c
-
SSDEEP
12288:vqc3+GCueH5qEbnvaKi+YEuRKfM9Dna9hzHT+xVlMsRyFd3ouXfYfUqJJu8hBBek:v/uG2qE7I+Y0LGxVlMdpngfUcthSkkkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource New Order.exe
Files
-
New Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 734KB - Virtual size: 734KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ