PO(S4674 Flow 1 2) - -EJ2152 - 2025[.]9[.]25[.]rar

General

Target
PO(S4674 Flow 1 2) - -EJ2152 - 2025.9.25.rar
Size 1.5MB
Sample250925-qml3lsal3x
SHA256 4cc032e33eb281b2fcac95d224c0f8cb37217cb7da66163963af032de1e3f91a
MD5 8f107cf70bfaaf9d442430d1d274f593
SHA1 b9e4979f4509b15c629522152da708267e0f2d8f
SHA512 44d32e21f0ad6ed2585699979b54458d2fc033d134d6f6fdbdf4291250d76630b67943b983dfa7a42be56273309e039b0fd41726f94c6a19151c70d6528ffcbf
SSDEEP 24576:EaP+NoNQvDPa61tOHzhNxOlSrrGFkdnczYAgND4ZBr95at04N1OAtX:/PJQr0ThZrdiGEKVtX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SEPTMER ORDER HGH-PO25012 - PTWH SMS EL49.scr

File Explorer

PO(S4674 Flow 1 2) - -EJ2152 - 2025.9.25.rar

.rar 1.5MB
08-009-TA-9036&37AWAJI.pdf

.pdf 534KB
SEPTMER ORDER HGH-PO25012 - PTWH SMS EL49.scr

.exe 1.1MB

PO(S4674 Flow 1 2) - -EJ2152 - 2025.9.25.rar

SHA256 4cc032e33eb281b2fcac95d224c0f8cb37217cb7da66163963af032de1e3f91a
MD5 8f107cf70bfaaf9d442430d1d274f593
SHA1 b9e4979f4509b15c629522152da708267e0f2d8f
SHA512 44d32e21f0ad6ed2585699979b54458d2fc033d134d6f6fdbdf4291250d76630b67943b983dfa7a42be56273309e039b0fd41726f94c6a19151c70d6528ffcbf
SSDEEP 24576:EaP+NoNQvDPa61tOHzhNxOlSrrGFkdnczYAgND4ZBr95at04N1OAtX:/PJQr0ThZrdiGEKVtX
MD5 SHA1 SHA512 SSDEEP

SEPTMER ORDER HGH-PO25012 - PTWH SMS EL49.scr

SHA256 242418928ee50cd9d4c70bddf5b9434ee65244aa46376f123f1c59359c281eaa
MD5 0755252c826a1427e4599d22c5fee3f8
SHA1 bc9295b5c7575678508822e38dbae2306775d2ae
SHA512 013cc54559a7c172519a28916bc7dc828dd4de84f50f605daf7665164fb9a0f771b9a6fd44a6c1235e0cff100534534453d631855a4692532edf95d7f6f59203
SSDEEP 24576:N+tTZr1FlRx+DOq+2Bq4LhiLIKhpfRgaUaawteiEOhwWZ:Ed1FlRIDOqPJFKzR7ZbteEh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\KDHuCSiKeF\src\obj\Debug\wqkx.pdb

Sharing