General

  • Target

    b8528a530713f32e6c47b491b4a8a246

  • Size

    2.4MB

  • MD5

    b8528a530713f32e6c47b491b4a8a246

  • SHA1

    c3206727e6817e70ce75c00e2e97c17e0fca26fd

  • SHA256

    0a028766093d0b322eaf803dc600e0e7a9cb303208559b25764f26d6ed897bb6

  • SHA512

    1f864f5a592e9db85c44dc23656cd31d2c38dcd6c3f0e8ffb1506794af10b892e617522d513328404227bb7b149d23e3229fc66c94992f0aa65e4462c851dd2e

  • SSDEEP

    49152:mQaO0Ie82QohH10Ij5bLjUdSYp9fMlOCqbIc4fP/l00qHdGCrdb:mS0nJiIJjUdt3fVC4Vwt3Adb

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 7 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • b8528a530713f32e6c47b491b4a8a246
    .rar
  • 147415543/BIN/ACC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/BAS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/BOM.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/Data/Script.sql
  • 147415543/BIN/JIT.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/PMC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/SAL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/SEC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/STO.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/STR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/SYS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/BIN/Sunway.udl
  • 147415543/BIN/SunwayERP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 147415543/ChgPassword.dfm
  • 147415543/ChgPassword.pas
  • 147415543/Clear.bat
  • 147415543/Common/BaseDBEdit.dfm
  • 147415543/Common/BaseDBEdit.pas
  • 147415543/Common/BaseDlgForm.dfm
  • 147415543/Common/BaseDlgForm.pas
  • 147415543/Common/BaseForm.dfm
  • 147415543/Common/BaseForm.pas
  • 147415543/Common/BaseMDForm.dfm
  • 147415543/Common/BaseMDForm.pas
  • 147415543/Common/DBPicker.dfm
  • 147415543/Common/DBPicker.pas
  • 147415543/Loading.dfm
  • 147415543/Loading.pas
  • 147415543/Login.dfm
  • 147415543/Login.pas
  • 147415543/Main.dfm
  • 147415543/Main.pas
  • 147415543/Module/ACC.cfg
  • 147415543/Module/ACC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/ACC.dof
  • 147415543/Module/ACC.dpr
  • 147415543/Module/ACC.res
  • 147415543/Module/ACC/ACC_Main.dfm
  • 147415543/Module/ACC/ACC_Main.pas
  • 147415543/Module/BAS.cfg
  • 147415543/Module/BAS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/BAS.dof
  • 147415543/Module/BAS.dpr
  • 147415543/Module/BAS.res
  • 147415543/Module/BAS/Bas_Main.dfm
  • 147415543/Module/BAS/Bas_Main.pas
  • 147415543/Module/BOM.cfg
  • 147415543/Module/BOM.dof
  • 147415543/Module/BOM.dpr
  • 147415543/Module/BOM.res
  • 147415543/Module/BOM/BOM_Main.dfm
  • 147415543/Module/BOM/BOM_Main.pas
  • 147415543/Module/JIT.cfg
  • 147415543/Module/JIT.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/JIT.dof
  • 147415543/Module/JIT.dpr
  • 147415543/Module/JIT.res
  • 147415543/Module/JIT/JIT_Main.dfm
  • 147415543/Module/JIT/JIT_Main.pas
  • 147415543/Module/PMC.cfg
  • 147415543/Module/PMC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/PMC.dof
  • 147415543/Module/PMC.dpr
  • 147415543/Module/PMC.res
  • 147415543/Module/PMC/PMC_Main.dfm
  • 147415543/Module/PMC/PMC_Main.pas
  • 147415543/Module/SAL.cfg
  • 147415543/Module/SAL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/SAL.dof
  • 147415543/Module/SAL.dpr
  • 147415543/Module/SAL.res
  • 147415543/Module/SAL/Customer.dfm
  • 147415543/Module/SAL/Customer.pas
  • 147415543/Module/SAL/Qutation.dfm
  • 147415543/Module/SAL/Qutation.pas
  • 147415543/Module/SAL/Sal_Main.dfm
  • 147415543/Module/SAL/Sal_Main.pas
  • 147415543/Module/SEC.cfg
  • 147415543/Module/SEC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/SEC.dof
  • 147415543/Module/SEC.dpr
  • 147415543/Module/SEC.res
  • 147415543/Module/SEC/SEC_Main.dfm
  • 147415543/Module/SEC/SEC_Main.pas
  • 147415543/Module/STK/STK_Main.dfm
  • 147415543/Module/STK/STK_Main.pas
  • 147415543/Module/STO.cfg
  • 147415543/Module/STO.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/STO.dof
  • 147415543/Module/STO.dpr
  • 147415543/Module/STO.res
  • 147415543/Module/STR.cfg
  • 147415543/Module/STR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/STR.dof
  • 147415543/Module/STR.dpr
  • 147415543/Module/STR.res
  • 147415543/Module/STR/STR_Main.dfm
  • 147415543/Module/STR/STR_Main.pas
  • 147415543/Module/SYS.cfg
  • 147415543/Module/SYS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 147415543/Module/SYS.dof
  • 147415543/Module/SYS.dpr
  • 147415543/Module/SYS.res
  • 147415543/Module/SYS/Sys_Main.dfm
  • 147415543/Module/SYS/Sys_Main.pas
  • 147415543/SunwayERP.cfg
  • 147415543/SunwayERP.dof
  • 147415543/SunwayERP.dpr
  • 147415543/SunwayERP.res
  • 147415543/bmp/Build.bmp
  • 147415543/bmp/EditRecycle.bmp
  • 147415543/bmp/Exit.bmp
  • 147415543/bmp/FileDelete.bmp
  • 147415543/bmp/FileNew.bmp
  • 147415543/bmp/FilePrint.bmp
  • 147415543/bmp/FileSave.bmp
  • 147415543/bmp/SearchFind.bmp
  • 147415543/bmp/SignalWarning.bmp
  • 147415543/bmp/ToolsPencil.bmp
  • 147415543/bmp/ViewDesktop.bmp
  • 147415543/bmp/copy.bmp
  • 147415543/下载说明.htm
    .html .js polyglot