Static task
static1
Behavioral task
behavioral1
Sample
BJ Energy Solutions ORDER_O.50338 2024-25604.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
BJ Energy Solutions ORDER_O.50338 2024-25604.exe
Resource
win10v2004-20241007-en
General
-
Target
6e256d70f40690d1daf4f96c85b6a41724f7d2b8fa5ec2de2175eba4e631f40c
-
Size
703KB
-
MD5
2f00f609b9f792cd152b5a64770e34ec
-
SHA1
853a43b6a328bc749370d6ed8d91ba2d2b03a4c9
-
SHA256
6e256d70f40690d1daf4f96c85b6a41724f7d2b8fa5ec2de2175eba4e631f40c
-
SHA512
e73fe498b7e4bf0d3ef03f29d23e3c1aeb04feeac8a94e9354ec5e29d7f6423321902923d634edb8485add9b7f5ebb50f5589bf8a65c1dd97e31fe2beb324ccc
-
SSDEEP
12288:y7aV2iENmInsjp4P9zwqPT36sPq/aHtYWMm4Tr6hY5yoHpVQS0+zuKnp5+2:y7GEorSF8S36sPq/6r4WS00uKpI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BJ Energy Solutions ORDER_O.50338 2024-25604.exe
Files
-
6e256d70f40690d1daf4f96c85b6a41724f7d2b8fa5ec2de2175eba4e631f40c.zip
-
BJ Energy Solutions ORDER_O.50338 2024-25604.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ