Static task
static1
Behavioral task
behavioral1
Sample
NEW ORDER #98540-0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NEW ORDER #98540-0.exe
Resource
win10v2004-20240226-en
General
-
Target
3dc7c33b191301553530ec673f30f6eb.bin
-
Size
599KB
-
MD5
7e7998d5172e8fba1f444baed9202ba8
-
SHA1
1d320137830c70bf0eb4131808a9b83d79de70b4
-
SHA256
dbc4cb1d10e4027c0834e8a4046aa0e567f9f6aa799b9604af8f675ad74861c8
-
SHA512
12e0df1ba1d1bc66ce978d3946a31ebd11b5e35eeefb70acd0bbb57d671b7a6419c2c5f9834e8220d58566a7751e2913b4563f981b10c33fddd15e6aa6116316
-
SSDEEP
12288:zWtUNOqqWlVe+dOEsL8mVELuZtjDez6GsUEUy2x6hDEvEXvpvOnGt4Uu0fDePTug:zWOIqnPe+VCRyztBDxaVvOnGsODePTug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/NEW ORDER #98540-0.exe
Files
-
3dc7c33b191301553530ec673f30f6eb.bin.zip
Password: infected
-
815165435fc27148603cddb3d872c5fe435d348e4eb01ab6425600761aca6873.zip.zip
Password: infected
-
NEW ORDER #98540-0.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ