NEW ORDER 4016291 240043[.]ace | Triage

Sharing

General

Target

NEW ORDER 4016291 240043.ace
Size

527KB
MD5

5eb0b3923138b463207070d773a93693
SHA1

cd1a9ca12289acf171a8cf4918ffd1bb67d76223
SHA256

cdf24f64ae6cdb81c320151a17631ce36525204ce75e4cbe70efd2e84578bc35
SHA512

0139f62bb63f1b03aa2a863068daca6dc4c53d54c364b896caa89caf3f7c9b1119db7f2aab3d58735fa8de92cfae5411d38a14c55e448f595087844aefa96023
SSDEEP

12288:GUWM5kpKHGXPAvmgMfuP7761RTI3BvefjhpJhM68T7b6o1ysM+k9156:GE5gKIAegMfuPi1RjvMVT7WoUsM+kDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/NEW ORDER 4016291 240043.exe

Files

NEW ORDER 4016291 240043.ace
.ace
out.ace
.ace
NEW ORDER 4016291 240043.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fWVr.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ