New Order #837989[.]exe | Triage

Sharing

General

Target

New Order #837989.exe
Size

885KB
MD5

d8f3a68154ffc12d0677b879a386dc0f
SHA1

8be35f2b7a4c5454191181d72fc8da4eb7f48d1a
SHA256

061bc2648b58846a4dc7cc468cbf1b4bcd2be744502ea0775b705b04ef536dfe
SHA512

d119cd6f765b5de4095aba48ad0618623c78ebd9ca7c157d1cc48688af69e2b37e2e7a204dc01145c0c4425a113398c1feba26e84cc2df8a298a5bf4927942e8
SSDEEP

12288:fzH2iNtAmJPkvxkTLj5+hMfgwBoyum1gfDWnKGv9TCf1povSAYqcv2ShtTFn+Kbt:fL1XAsWIL+MfDumwALv9mbOSAkZ+6us

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Order #837989.exe

Files

New Order #837989.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 875KB - Virtual size: 874KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ