Static task
static1
Behavioral task
behavioral1
Sample
PO_19922.exe
Resource
win7-20220812-en
General
-
Target
PO.199224.img
-
Size
1.4MB
-
MD5
b1bf6859df30a9b71c2772e8a0c7743f
-
SHA1
5b0dcc835ccf648f5860a75827c95b71626bff11
-
SHA256
cb149f5680fed4db0a4f04d7fe1785061284ccc832c4bd97b4ddb3d50233a107
-
SHA512
e52460521b6b9e550b22dea08c9c30924a3f80052a853804d28226eaa3c396705f5f310f8b33af562062cc0c09d0bc40313af69381a95d2638e13e08e96b5726
-
SSDEEP
12288:KFnv7O6k/WF6OKHAFNnnU6DKW957vf96rjpzSHGEQ:+C62ArnjDV5bF6Zzx
Malware Config
Signatures
Files
-
PO.199224.img.iso
-
PO_19922.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 840KB - Virtual size: 839KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ