Static task
static1
Behavioral task
behavioral1
Sample
PO K25436.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PO K25436.exe
Resource
win10v2004-20220901-en
General
-
Target
PO K25436.exe
-
Size
851KB
-
MD5
ee464964fb566aa4cd15bc9891b384d4
-
SHA1
c20744fcd3b62a7b99efffc763f8a1c13df9e69b
-
SHA256
982bf149938582360266d3a12860b73ae5e35703c2d72eac41b160188f123a35
-
SHA512
7fb69faceb01a424301819509ef54b07c3eafe316582eb82860b899fd808d036c0b897a3627bcaa428bf163d40c6b60e286bd5e226ea4c9f6d933cca907a5d13
-
SSDEEP
12288:5bd4x1M829Fp+iW02kMsaOIDZqvNmECE1ELUVSdLFf:r46Fp+iJGzOI1qvE41sUVSd
Malware Config
Signatures
Files
-
PO K25436.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 849KB - Virtual size: 848KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ