Static task
static1
Behavioral task
behavioral1
Sample
new order.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
new order.exe
Resource
win10v2004-20231215-en
General
-
Target
caefedd93d01eb487a1a4d3d984bfa2f6de2038dc17ca709cdfd26af052f158d
-
Size
503KB
-
MD5
0b46f55cd68d70e31f53af21833b2b72
-
SHA1
09d7cb07b1033f38e150896b501035017952f866
-
SHA256
caefedd93d01eb487a1a4d3d984bfa2f6de2038dc17ca709cdfd26af052f158d
-
SHA512
f7daae002bf092d32b7fdab30168df6dac9ffa64b6867c5e74204f6bfddd29e9c453a547acdffc8a7303ba9ca7775ae7e5dbd58575d24be8137c4ec89c9af471
-
SSDEEP
12288:OK6lewL2Hig1RIh70UW4oSN2cp637SQ/L7UHY/y+NX4ut/huLaNB:hW3QGvoSNPp6BwHSnFBtJyGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/new order.exe
Files
-
caefedd93d01eb487a1a4d3d984bfa2f6de2038dc17ca709cdfd26af052f158d.zip
-
Bulk new order.iso.iso
-
new order.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ