Static task
static1
Behavioral task
behavioral1
Sample
po110-11 Order_ROYPOWTECH %100% S51105P-E01 (最新)IMG .exe
Resource
win10-20240404-ja
Behavioral task
behavioral2
Sample
po110-11 Order_ROYPOWTECH %100% S51105P-E01 (最新)IMG .exe
Resource
win10v2004-20240802-ja
General
-
Target
po110-11 Order_ROYPOWTECH %100% S51105P-E01 (最新)IMG .rar
-
Size
513KB
-
MD5
1b1af04ec4f1ac9e53318d824992b984
-
SHA1
2db68b832870387e5060705558c874f6fb0cb956
-
SHA256
ce10a536feb43d93646ca39eda3dd4f240c1d0617cdf96824fed80add67b4fdf
-
SHA512
ee99383a51be68d8e361a548191529e67f0a66e285349ecce625641bf63f9166bc15341d657faf88ee1240229f8901464778392b63c9574adccc70eaca8decd1
-
SSDEEP
12288:BuH3YfZ9glbObjgURKCnp3TDaqOM16iSZQX7i2X5:BusgYbsUDp3316ifX7lX5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/po110-11 Order_ROYPOWTECH %100% S51105P-E01 (最新)IMG .exe
Files
-
po110-11 Order_ROYPOWTECH %100% S51105P-E01 (最新)IMG .rar.rar
-
po110-11 Order_ROYPOWTECH %100% S51105P-E01 (最新)IMG .exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 609KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ