Static task
static1
Behavioral task
behavioral1
Sample
NEW ORDER 28938928384893029.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NEW ORDER 28938928384893029.exe
Resource
win10v2004-20231222-en
General
-
Target
7267423cb651fb1a5f0fa8189b188466.bin
-
Size
38KB
-
MD5
e6011dae9d56835babfa70c1e4c89ad1
-
SHA1
4c4c6a9ad5cf17d61ead316186b6e671e7fdfca9
-
SHA256
8cbbd0fbdfec98528feeb5751584548ca17b2e71b58965053b9eff5872ee2387
-
SHA512
be7291d184f261b276099262decafd992f21bed1a57f3f5baffbe40296c7018f923a6b7e42f0600163b788ee72fb0fd6565309b468c69681494928b8bd895d69
-
SSDEEP
768:t3hlZUexbXRnv0eM9WhnSC91NBMedsk1KW/tMJ46R1AESq/ypSJwnM:9WYbX90f96j1NBRdp1Kyn6R13S/Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/NEW ORDER 28938928384893029.exe
Files
-
7267423cb651fb1a5f0fa8189b188466.bin.zip
Password: infected
-
dd0db8cd67753ee046c45c23e0a2d05a48a22a8adda0316760349c4aab3faa2b.xz.rar
Password: infected
-
NEW ORDER 28938928384893029.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ