03092024_0044_02092024_NEW ORDER_PDF[.]rar | Triage

Sharing

General

Target

03092024_0044_02092024_NEW ORDER_PDF.rar
Size

613KB
MD5

f39f41d546b90c376000d1f992d41638
SHA1

a102f5ca60e7a7e8660c0b0e26dd4f2f6f80f06b
SHA256

f4b06961117dfa4f08c867df3dae8a32988c0da6ae2a5048d5290750d30cf68c
SHA512

4700709ae07ee0f27a4f840775da3ada509f45cf4320d9b66a1bcf44bcfb8ef976a64f61cbcb41681e8f789bbf7bce3595be9a1c01c74396b4bd542c9134b82c
SSDEEP

12288:NRtEKIcGO+NknppLfdeVgljW5IEMPh09ZQltEocicGfIm3c:JEK0knzrLlBEYhBltltC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER_PDF.exe

Files

03092024_0044_02092024_NEW ORDER_PDF.rar
.rar

Password: infected
NEW ORDER_PDF.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OsOF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ