NEW ORDER43524#[.]zip

General

Target
NEW ORDER43524#.zip
Size 507KB
Sample240510-mnajesda52
SHA256 36ea0fcb3de1dc5e44093421767b3d4ce59b7a04e2d800d663ae63c745e0c98b
MD5 1ed979112a4dbdcd8493f612d656ed1f
SHA1 046867a298a2425bf7d186e9d876d2316a7cecbf
SHA512 1df21665c69f7b62fcfb6bc4f8dcdb370d7a33438c895a4ea99a2ff3f8b345eec12ca966df5e5801c9017024ec3ae4e631ba38712159eab22bca8e007bd6d771
SSDEEP 6144:UyKMeQYD+lA9jGKocCU2u8Sof1Bu1oowhqnXr9EXGgmV8qSMikJseAmAzRaviWe:nKMeD6e4FcCTSoDW1AVmVLSMtAzAviWe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER43524#.exe

File Explorer

NEW ORDER43524#.zip

.zip 507KB
NEW ORDER43524#.exe

.exe 816KB

NEW ORDER43524#.zip

SHA256 36ea0fcb3de1dc5e44093421767b3d4ce59b7a04e2d800d663ae63c745e0c98b
MD5 1ed979112a4dbdcd8493f612d656ed1f
SHA1 046867a298a2425bf7d186e9d876d2316a7cecbf
SHA512 1df21665c69f7b62fcfb6bc4f8dcdb370d7a33438c895a4ea99a2ff3f8b345eec12ca966df5e5801c9017024ec3ae4e631ba38712159eab22bca8e007bd6d771
SSDEEP 6144:UyKMeQYD+lA9jGKocCU2u8Sof1Bu1oowhqnXr9EXGgmV8qSMikJseAmAzRaviWe:nKMeD6e4FcCTSoDW1AVmVLSMtAzAviWe
MD5 SHA1 SHA512 SSDEEP

NEW ORDER43524#.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9dad6e1350810eaee247d225c134a39441f286907c861fd6c825656cc9224613
MD5 240f134e5318c9efc8f4edb219a9b16f
SHA1 7150a57a5817c1602524fc2b3b8dfc2910b77148
SHA512 704090e6007ae618f397d86ec1c7ffd8b2152cb2dfcbe6813a4d04963f07805ff7fd7f3ae4bdf99477f0791c31ede7609f59265a803893c7c89f07b62841f581
SSDEEP 12288:JYuePwisfcgWf/j5VtK+CVINMX9yKBg7vj1UJ:2uIydk/jPoi+9yKe/1U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

842062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

NEW ORDER43524#.zip

NEW ORDER43524#.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

NEW ORDER43524#.zip

NEW ORDER43524#.exe

mscoree

dotnet