Static task
static1
Behavioral task
behavioral1
Sample
Asco Valve Shanghai OrderPO-011024.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Asco Valve Shanghai OrderPO-011024.exe
Resource
win10v2004-20240802-en
General
-
Target
Asco Valve Shanghai OrderPO-011024.exe
-
Size
783KB
-
MD5
11ff8e45351b4fef0f7e723c1b1e04f1
-
SHA1
ff595a4ea95aba1cca52de553949e6a73c19c265
-
SHA256
5cfb623fd29edfb21bc7fb3d734f2e6ebb7f151e12d2fbcb61bafefdfccb24c6
-
SHA512
801f54add34c294f4bdf95ae8ebe8ab603fa7be88124a78fbf177e10e4a53a599d481b173fb4cf4f40268aa16aa5124289ad26c6f0c0230637c1d5b763155487
-
SSDEEP
6144:qZZSGZ1pOTD97kVoluxSnQJ2UYbbnEqa57lW1ChtCxxE5jbWs5E19Cd0C7vvGm97:qzvZ1pSptYSQJK/EtdCsPGsdPvvGm9h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Asco Valve Shanghai OrderPO-011024.exe
Files
-
Asco Valve Shanghai OrderPO-011024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ