nNEW OREDR 726738877288882877737[.]xz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nNEW OREDR 726738877288882877737.xz
Size

72KB
MD5

b00414ed8d962e2368336cc21942084f
SHA1

e939c5b981f10ca59887a323067892121e91c3f9
SHA256

a159917791a2ba404b468f0e2e5a0d5e149d272fac374711d6c38df7a8ad06cf
SHA512

41a23bd755c288ad30c2a143a24e6348be126a497d35631e5fad07de169d9f313553d9c9a111a2236c5d8be66444edac37418627b5f14ab6af0456e24eab1d06
SSDEEP

1536:pCpm2FDbzpW8oiMowtzv2QbHVR/C6HdlGvRYvuV1qh:OJDk43CSQb1UubKJV1qh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW OREDR 726738877288882877737.exe

Files

nNEW OREDR 726738877288882877737.xz
.rar
NEW OREDR 726738877288882877737.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ