NEW ORDER -02_19_2024 _744321558278[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW ORDER -02_19_2024 _744321558278.rar
Size

10KB
MD5

50b0808e8b80ad0cc18a54b803ddd5d4
SHA1

f5c4bccd6d2d9ad7bd8037843ea1a6d1038af51c
SHA256

73ec598fc6589848709044bfb6e4daa7cef6856f472b7e4eef47205015a670b2
SHA512

7a788cdab989369094ff29ce5f761b6bc44d4cf2f03e3da1801e926f6079722f8b0a6fae4c143df0440c36a78c05ad8d0e86ff898ce4ad57ef67da69073fe44b
SSDEEP

192:0TduxLR5dgoSHAr/h8813+qZwJAxtAc1so+1AAtAb57er+A:IduxdgpHAr587qZwJsAcXCYBeCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER -02_19_2024 _744321558278.exe

Files

NEW ORDER -02_19_2024 _744321558278.rar
.rar
NEW ORDER -02_19_2024 _744321558278.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

PaFin.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ