Static task
static1
Behavioral task
behavioral1
Sample
DF000645--NEW ORDER.exe
Resource
win7-20240221-en
General
-
Target
532f65ebadd20c44861ec233517b54d313782a8f39158c58978d811ce70a1fd7
-
Size
600KB
-
MD5
f946f45ef1a849b21e6f2a12479a4614
-
SHA1
46d1f8acabac1c1bc7f7a12ca0b768c44a4a59fb
-
SHA256
532f65ebadd20c44861ec233517b54d313782a8f39158c58978d811ce70a1fd7
-
SHA512
14e96daca904e1549439c58ee05cee3a424517204fec40aa60960fd1e087c5e2f6fd08709100f2c5a930af978b90be4654cd6e1139f8e2daa836d9805b1bee56
-
SSDEEP
12288:gO29D25RolMSo2HUcaCjblym2uw03VXC0fNkXGPicwE4xQMUBD6i4XM:929S+8Cjbsyw0lbVpPicwEoRUBD6iUM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DF000645--NEW ORDER.exe
Files
-
532f65ebadd20c44861ec233517b54d313782a8f39158c58978d811ce70a1fd7.zip
-
DF000645--NEW ORDER.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ