Static task
static1
Behavioral task
behavioral1
Sample
New Order.exe
Resource
win7-20240704-en
General
-
Target
MalwareBazaar.1
-
Size
702KB
-
MD5
69fd5caa42fbfee9f8dbabe72a2a619a
-
SHA1
b7c6b1af310560a61b30f617c79fcff70783c773
-
SHA256
104ab77fb1ca4088384acacaa40b79f8ed7fafcaac9a2730eaebb27fc3592f7f
-
SHA512
f79db478e01464f85b5fc6d31614574851168ffe6a5adeffd53b48233ca1ddee0ed76cdf22d3747bd696b05e4705cad1ea812f1166b3c956f469a6933152c5cb
-
SSDEEP
12288:SKuAEx2MXm9MJSqf9/d0FuoGOoCADobqLl0hwcXd82b052od0qaGtTnLLGObke1E:gxFXm9MJhFWADM4lcwcXm2beHd0RMLLk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/New Order.exe
Files
-
MalwareBazaar.1.rar
-
New Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ