Static task
static1
Behavioral task
behavioral1
Sample
New Order ABTECH 20240513.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
New Order ABTECH 20240513.exe
Resource
win10v2004-20240508-en
General
-
Target
15a3088d25595defddf21d9b0819aff2dc9d8768.rar.tar.gz
-
Size
668KB
-
MD5
13772c5c85b63ab38dfe78f342031393
-
SHA1
2a088819158226d8ff8f4a5b1be3b5934330c2bc
-
SHA256
bb27d5f6f583f02c9fcce6fdbfaf089d23f2130c3347e3a5f425f14e0e91c84b
-
SHA512
b06ebef2015c41dc9f6e609e0d5c9c6cf87ebecdd20271f78c44baf75c1147752534795f02806285b899d38d04fd0e76b5b7e20242b0746219a9cff8baf15577
-
SSDEEP
12288:nrcdDokMWRiEhpG7t/ETJdZILDbeuPWrvpesvfkZ5yO2PWu62vqXKA4m8qTHtPOr:WDoKwt/ETJdZoDbe7AsvsnJ2Ou62idFQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New Order ABTECH 20240513.exe
Files
-
15a3088d25595defddf21d9b0819aff2dc9d8768.rar.tar.gz.zip
Password: infected_te_report
-
15a3088d25595defddf21d9b0819aff2dc9d8768.rar.rar
Password: infected_te_report
-
New Order ABTECH 20240513.exe.exe windows:4 windows x64 arch:x64
Password: infected_te_report
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 677KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ