Static task
static1
Behavioral task
behavioral1
Sample
PO.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PO.exe
Resource
win10v2004-20220414-en
General
-
Target
4a2998327c65c07148f057e65326099b17a27159243bc8851e8aef90d12ec860
-
Size
1.4MB
-
MD5
426be796aa1c0419ffe1414f4776cfcc
-
SHA1
77f702f87bd31ab32b9d4f8c9dbf41cbad292990
-
SHA256
4a2998327c65c07148f057e65326099b17a27159243bc8851e8aef90d12ec860
-
SHA512
5dffdc77cfe745de97b8bc53231a6c1b67fa1a9902775c0d5c9eb284a4d0dfea88dee080a8be2eaa5ffe0d24679867334a8c69cc38875788dca3f030eb55056d
-
SSDEEP
24576:rq2aIN4hpyaZB2rJ/zljy7ilRUHxB+sAmtupmk9bo3cIePuicya:/a/ytJbljBleRB+sAIukS0cyi/a
Malware Config
Signatures
Files
-
4a2998327c65c07148f057e65326099b17a27159243bc8851e8aef90d12ec860.zip
-
PO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ