NewOrder-28012025001-pdf[.]exe | Triage

Sharing

General

Target

NewOrder-28012025001-pdf.exe
Size

743KB
MD5

4e520a7ba2d74a9913565d83769a51c2
SHA1

647a0f0ef0c95d656b50c8b881d065406342126e
SHA256

b30e339a7ecbbf9ea338c915cf1e3f8e6b6740b314ef1d08e38b1694e3446163
SHA512

ee079bce8fe21a41a4c0be0733d3b6146f3ae0571d8441fdb94409fecabaca122eaca96475087f28aa2176a74fd102f81707eff95f45850196ca1de3f037bb35
SSDEEP

12288:gjjLOLZ6pXiuzDlEa5R97w8m4KtHL3N7BhUdJzDvYqBrObeNdqqkf8px4+xaUJ:YLOL0VXlEapE8mZHx7U/z/Qeqq88Q+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NewOrder-28012025001-pdf.exe

Files

NewOrder-28012025001-pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Rrev.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 740KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ