gByv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
New-Order20240303.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
New-Order20240303.exe
Resource
win10v2004-20231215-en
General
-
Target
New-Order20240303.exe
-
Size
858KB
-
MD5
f7a480f48e808a493a91f31b8a72d20a
-
SHA1
1f4f44e0feb5166eb107c0a7e9fd1b0f921db9e2
-
SHA256
e90f22b601bafbd637700fa9338a4adb4413b8e7944941403560d11ca7997618
-
SHA512
b38ca542d172c1dd755a35df2d44de9466cb1ed681506b58953f7c63154e3c22a1fcea9a125bdd4931294d6d7c408a051269e039cf131968fdac53aa85c6fbcb
-
SSDEEP
12288:iI9M+GHzN8KquCQq9RPf+Dvc5ppSWzzt/i3c/wfFTumO1dspX9W:FezWVxNWvep/zztKM0L0dspX9W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource New-Order20240303.exe
Files
-
New-Order20240303.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 845KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ