WrgQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
J5A-H2110-11 Order_Cosmo Elect %100% S51105P-E01 (最新).exe
Resource
win7-20240903-ja
Behavioral task
behavioral2
Sample
J5A-H2110-11 Order_Cosmo Elect %100% S51105P-E01 (最新).exe
Resource
win10v2004-20240802-ja
General
-
Target
J5A-H2110-11 Order_Cosmo Elect %100% S51105P-E01 (最新).7z
-
Size
538KB
-
MD5
9cd3ffca8e6691332f67f0673e76caee
-
SHA1
d69855a8ea026886b6bd77181c82fb7c063c7c06
-
SHA256
e6a0be1521a421251a999a576ecdea46bb253eac196e00fc60ecc1ccda401871
-
SHA512
3cbbcd6ca2be8ea9d34e530bdbaf1d8f3a5af46e1abc7869690b2247e8a644fcc7cfa0715ed9fc1944fc1ea45c9ab0b1d30c2a21baea601ba7ba8fa8be4b8545
-
SSDEEP
6144:5Iq/g5VAwK8CvwJWLddFXxjCBd4OJ9+sZ7MrevwAyHjJTkiGklFt80uh7wbB+Txt:5KAwKLvfLDTjkZ7My0NkiGk7bBwcgjMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/J5A-H2110-11 Order_Cosmo Elect %100% S51105P-E01 (最新).exe
Files
-
J5A-H2110-11 Order_Cosmo Elect %100% S51105P-E01 (最新).7z.rar
-
J5A-H2110-11 Order_Cosmo Elect %100% S51105P-E01 (最新).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 632KB - Virtual size: 630KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ