Static task
static1
Behavioral task
behavioral1
Sample
PO.r02.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PO.r02.exe
Resource
win10v2004-20220414-en
General
-
Target
20f2ef9ebc78d5ed58d747bcfac961410da3ee77c795913e981eb9bf9606f911
-
Size
404KB
-
MD5
13ba5afb599c80cf031bdc4847fa4654
-
SHA1
6f5ecbf639e8c18e6e90dfcde06c3ec7a62b6fb7
-
SHA256
20f2ef9ebc78d5ed58d747bcfac961410da3ee77c795913e981eb9bf9606f911
-
SHA512
9dc8c9fd9fbedab1bdd12b0699af55041cba79c7b49666d428f5f098840aec801660233a34b06fbb96c9237ba8d695f3cdca4235ab4de7396f4c02bd663096f9
-
SSDEEP
12288:sJKNgDzKMbQ2+4jw1F0hz+Z6T1PLZmPHdt:CbnKMc2DwP01+Z6T1PtmPdt
Malware Config
Signatures
Files
-
20f2ef9ebc78d5ed58d747bcfac961410da3ee77c795913e981eb9bf9606f911.zip
-
PO.r02.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 511KB - Virtual size: 510KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ