NEW FRANCE ORDER[.]tar[.]001[.]tar | Triage

Sharing

General

Target

NEW FRANCE ORDER.tar.001.tar
Size

1.2MB
MD5

974f153a36663417a8e85d4e6c0bd1f2
SHA1

2f831b2626f7c884605138430888934c3eda2907
SHA256

9c35edce9c3128f5173db54f41924c13818df57c5ac78414605c1d51d6adcd2d
SHA512

edd34eaf2ea451c383c2124f057124b0925d6dd6bb29b0db30aafaf3075ec6d96ad307f5684c7a593f78d20b6dc5ea31e0bf54c54d897bfcc88a655269d77b54
SSDEEP

24576:I9Dm144rcw4GJrQgKb1GW2npHZ/Ar7bioFYyy9XOBH1z:B14Mcw4G1Q4WkZsiEY8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW FRANCE ORDER.exe

Files

NEW FRANCE ORDER.tar.001.tar
.tar
NEW FRANCE ORDER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ