New Order INQ-087867[.]rar | Triage

Sharing

General

Target

New Order INQ-087867.rar
Size

781KB
MD5

a7c57433af2cb112ee07f0b3c7ba5019
SHA1

a43b81d0ba85cdb02e2a86af7ca7d91a50baf2e6
SHA256

7ee6569c9a8f669522d4a6c74dbcbd626ee5d894e88893d58a686db16ad60932
SHA512

1a82dadc4fdf01e58cccaadb369bae02636c2e2ce6d977d1117a870feaa39ef856ee8aa187472734914f8df42e7dc7a97f1965db8d6c897ad1d8415e6e3fae7e
SSDEEP

12288:3v/ERPpIe2gjboEO8C5k8A3iClF2xxYh9Mu5mG+MKhzQsyMtiZI6E28PF:fqPpjrAESClwx+fMKmfZyp78PF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Order INQ-087867.exe

Files

New Order INQ-087867.rar
.rar
New Order INQ-087867.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ