b7c9a5dd14e57d23aa528063910f557ceb9355c7e2285c8b3aee96f192deb66b[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7c9a5dd14e57d23aa528063910f557ceb9355c7e2285c8b3aee96f192deb66b.gz
Size

674KB
MD5

b7bc91949e4828f3ec9fea0b8c58c8b3
SHA1

6d57fdce8acd105f41326f6804c65c66a58325f8
SHA256

b7c9a5dd14e57d23aa528063910f557ceb9355c7e2285c8b3aee96f192deb66b
SHA512

0406a7b50f01effd597b5f92fb0a069f6de1ea1bdd456d186664ab0d46cfe07ff084ae5f0658fc8237062a7fc5c8c5a92464eb170b15339220c9d2d708866cc1
SSDEEP

12288:0tux2BriInp98gG7HH8MT3IJLW0L+SG5jIYiHhz5cjkXEQmLkbjBt8MGmk7f:KS2xi88LH8MrIg3jIYc5cjkLzfGz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/new order 20240508.exe

Files

b7c9a5dd14e57d23aa528063910f557ceb9355c7e2285c8b3aee96f192deb66b.gz
.rar
new order 20240508.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

GLiw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ