PO-92059[.]doc[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

PO-92059.doc.exe

windows7-x64

PO-92059.doc.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

PO-92059.doc.exe

Resource

win7-20220718-en

netwire botnet rat stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

PO-92059.doc.exe

Resource

win10v2004-20220721-en

netwire botnet rat stealer

windows10-2004-x64

10 signatures

150 seconds

General

Target

PO-92059.doc.exe
Size

675KB
MD5

5d7895b3ede1833a79a5c4fc7dc0455c
SHA1

714ce92fce404b32345b06e1d0fbbfaff30eaa62
SHA256

7d43cddf5679f4233ebf701f89050ec267f892165a4c34084ad65963af7ebc36
SHA512

6f0a9c1cb2d74436ebde9b2c1068902bb9e0a943fc59f788f3c9e37e037b6dd9c0e5e86f2aa3d9c67e9740e7012f42c96d04ba0f2c3ac69a1c1c106db4fbe26d
SSDEEP

12288:P31hC3fj/wvwjMN98IEy3LBdQ1WtBSHjFvrrykfLAW8DKfILGx8:3C3fj/4wjQuY3LBdQsk5HZUW8DFGx

Score

N/A

Malware Config

Signatures

Files

PO-92059.doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy