z1NEWORDER00112_PDF[.]exe | Triage

Sharing

General

Target

z1NEWORDER00112_PDF.exe
Size

2.3MB
MD5

3d445e07577d943f8c4c465bd8a0387f
SHA1

42c62c050f77ce06358782462209d5f72b2b405d
SHA256

1e3c8e841261ebe56d395276a65211ed8fa4480ca68f18d3ac9f6738c4dba5a3
SHA512

ca733d8202a1648cea2cb5ad845c3b1f362f8da69869ca2d4840e36f371b4ee5188bbdd2a98277f9b0dd1b8846b5c5505f6f2636f22fd3acafd326e1a5b23569
SSDEEP

24576:iyY8G4KajOKx1GAYaRBf+9/9W6/zgfgxgojUvUW06Fq6NZ:XzGAtf6/Z0fgC6UvUW06Fq6NZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z1NEWORDER00112_PDF.exe

Files

z1NEWORDER00112_PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ