Static task
static1
Behavioral task
behavioral1
Sample
neue Ordnung18082021.exe
Resource
win7-20240221-en
General
-
Target
c1d39dd878c4d632adeb649702dd45b7
-
Size
1.0MB
-
MD5
c1d39dd878c4d632adeb649702dd45b7
-
SHA1
213ae8264ff01053d69cd2f1a9453aba448ec439
-
SHA256
e6c55d42e7f24d63fe6c248a2990a6d5561fd5d707127cdae235c72191f1884b
-
SHA512
bd2b99e0b36f7b7b1a0472defe5f043d6a9cf9bcc40df4a864cdd25e63449292c8952cd27c2a9c07f37dc016b38ba6aa1f79c153006510f4c34cbe888069d715
-
SSDEEP
24576:DUU3ya4Qy/FTCJJYF+Dyr23GG7QHfEWnTHlixHcGbBNbVsc9kdmSo0mKWr:DUa4fdqYQDyy3Gz/EMTHOHF7Js6kvovr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/neue Ordnung18082021.exe
Files
-
c1d39dd878c4d632adeb649702dd45b7.zip
-
neue Ordnung18082021.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ