New order[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New order.exe
Size

662KB
MD5

77e820d354dec7d807a431f63c3d8c27
SHA1

4e4eb8a2040b969dc403196fb6df401dd3abd821
SHA256

070b26a4997c79949e6e34ecbd430a7f23c4e08ea426df2a743de893b8e9243c
SHA512

cc58873ecf0c9f1c08bd252f16063124a6c300e5e6c91f427f1c37937e503e80fee16050005ddcb9e113490ccb961b7d34d0a8bcadf03890569957eb76adda02
SSDEEP

12288:sEClUoqFDnDpoB/heuHX6SnhSMKk2u4DNL0Yttk22qZrSKlsHPaRtC:EOcB/h7Zn8buuNVttk2pht2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New order.exe

Files

New order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DpwV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ