25c13f17047614f66c023a23e58681506dd1d109b9955c5486bcad7737def8fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c13f17047614f66c023a23e58681506dd1d109b9955c5486bcad7737def8fe
Size

638KB
MD5

276becc85d8d1a4523aaa696d5e3d296
SHA1

6895f9e2045f5f8a8f23dc11dfa3c932df40e75f
SHA256

25c13f17047614f66c023a23e58681506dd1d109b9955c5486bcad7737def8fe
SHA512

55530359b5f8f512859dc4dca635dc5647b3f37119b624621b9a209676a66b00e3325077685496c7f721943d9d9b6a49de64b2465b285d1272457120ad4acbec
SSDEEP

12288:NVPEX2A1pQxvJQkBOEhACOFowtVm8xa60I1aT+qbZawCxsQ4qqNdMlchOdoK1x:TPEGmpQtJdOEm3FdbxEIMTRZTCx/wMlt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New_Order#3240ZA00J.pdf..scr

Files

25c13f17047614f66c023a23e58681506dd1d109b9955c5486bcad7737def8fe
.zip
New_Order#3240ZA00J.pdf..scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LGdh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ