z1NewOrderPO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

z1NewOrderPO.exe
Size

634KB
MD5

85b381da3d9166c3e1e918d07385c348
SHA1

df6625d3e4fc5ae76ca7a45dd2e4b69d93dedda6
SHA256

5daa414b78521010bf803ecd49376ea22488a7eff52bd8613d4ac17aa4addda0
SHA512

8a537a9ab7e5fbe1172eae134d8ed433ce7f72a37771a2694fe318b1e8bf0ea815288592ccc5a96711b40474dc58aed12ac5e425a9b38f7736de2c8f6ac44e81
SSDEEP

12288:PLWlZn7XRUQXBA7HHMg6EH4aRVeFofhjwJ7leuPMk08w:PqlZzbs6EHBVCo5MeuPMk08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z1NewOrderPO.exe

Files

z1NewOrderPO.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ