Static task
static1
Behavioral task
behavioral1
Sample
PO 0131.exe
Resource
win7-en-20211208
General
-
Target
PO 0131.exe
-
Size
601KB
-
MD5
eb437cbf64c34aebc51d6fd32ceec985
-
SHA1
2a1d8901240f6079da9c6978aabb658d55114d12
-
SHA256
3d4e25f876b2007b8b03a1d79109a52fcb5602644fb4554eb065f97853daa5de
-
SHA512
af5a6a5c4479ac2a5dc6988d8a283ff022914347159440bb8f292fa426253cb6eefe67809701eb4996de4f92a85e933003796669523cd99500f5337e547d9d38
-
SSDEEP
12288:aQuVO7JB3pUMr+hdedHxmGoP8q3ji17kzex7Pkq0jpQYBZ:3uVOVD7++dHxm5dXzGkBKm
Malware Config
Signatures
Files
-
PO 0131.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ