New order[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New order.exe
Size

656KB
MD5

fe24e9c1c2d459b0f157a009121c0c85
SHA1

431b20bfc6d5de451b000aa23bc9f133e9738012
SHA256

5f57f52adae6c2bc66134b12af0f88354d3efa874598c8761984bcc71b0995f8
SHA512

0e56d3c158989dc93d36dafb78dee4008deca94a0179ba6a471ccb365c56a907a8d6e80ab109ff7b76dabb755005367e84312ab8a1466f6929a5b85f675582ac
SSDEEP

12288:D2eQ5vziOPgMlP0XfxQ0+fk9su7kZqf6uk9oYyGmTfZnom64n2HeTg2u:iri+gM5Yn+fw3SuCQG2f8feTg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New order.exe

Files

New order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 654KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ