New Order1[.]ace | Triage

Sharing

General

Target

New Order1.ace
Size

681KB
MD5

4561eeaf84b7ce489765deeadd47e559
SHA1

eaeb5703f3efa4518aff0d60e0b8c0f66f03c6d4
SHA256

bc7a5671fa742711775708fb79992eaad8427177e7de2facc98fc16e3fc3570c
SHA512

2d75be5110431837adc50515047947951c6d85095e39bc15ac6a8f5c3060a8d2afe49f2c7ec4443abf6c891dd3dace2d4080acbe98553b504faf6eb9132c37c4
SSDEEP

12288:ft9LAL7lCB7Xoa7XrgKtKu4W//A/y6P2+qRxGgbZ0DjXrVt5JzEUa1Pest/s0DIu:V9kL7UrTtWg/ivOLAgyfXhBEUa0O/BUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack002/New Order1.exe

Files

New Order1.ace
.ace
out.ace
.ace
New Order1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HlZx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ