Static task
static1
Behavioral task
behavioral1
Sample
PO-92059.doc.exe
Resource
win7-20220715-en
General
-
Target
PO-92059.doc.exe
-
Size
786KB
-
MD5
432863e4c5dd350edd617bc855d336e3
-
SHA1
f4e642e4aa55c5d9354f2a7bc96edeebb0b0dd91
-
SHA256
d2723a5c5c192b80edf6e6ed6d033cd1f916ad9bffefed86ebd6120499c4a058
-
SHA512
a6e2a368166214fc939e1d9053eaeeace8e0a21c418a910d6daf6f6e2aa64810740801c26cda3f2db33a37a645cfbe73b34bbff1bbc2f0fd29332e68d31ffd59
-
SSDEEP
24576:5Tceo53uqRWrzt+llGIMAxpyMfRqq5oZvrw6KM5x:5TFAH8zt+jHMAxUMfYq5oZvxKS
Malware Config
Signatures
Files
-
PO-92059.doc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ