Static task
static1
Behavioral task
behavioral1
Sample
PO#CWA006635.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PO#CWA006635.exe
Resource
win10v2004-20220414-en
General
-
Target
485c8a8ef8e81296c121ef23c12c80579b7d7c62426f62288fa10aee04d4e704
-
Size
393KB
-
MD5
b0ca132b79d5d72014761b212a44a31c
-
SHA1
d1fda07396f1fb3ccd3ad04648d1eaec90d8500a
-
SHA256
485c8a8ef8e81296c121ef23c12c80579b7d7c62426f62288fa10aee04d4e704
-
SHA512
bc2caa5ed9ba552679d58eb2637919f5056569d9c04e2f2a3ab5226792d508a37c99102d6f90632c8f8a81de5440ad1e7977127a3b700655fa94e458bb32d4f8
-
SSDEEP
6144:nSJbgQ/9APqStjGDJ4EnJdu74XvWBQr7fuzNUnvf1ZS6cY2IdEh4Gik5xPk6XtRM:na1ASn1DD84/H8Unvdvd6PDHDoUPO
Malware Config
Signatures
Files
-
485c8a8ef8e81296c121ef23c12c80579b7d7c62426f62288fa10aee04d4e704.zip
-
PO#CWA006635.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 412KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ