Static task
static1
Behavioral task
behavioral1
Sample
PO2800065.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PO2800065.exe
Resource
win10v2004-20220812-en
General
-
Target
PO2800065.exe
-
Size
1.2MB
-
MD5
d3296db1fa8ebf18ca95f93151e9cfc7
-
SHA1
90e77abf34321670f4fed653c4a732c7b1e22f29
-
SHA256
8bbd67ae0b2c475d8e6585ab3f032e589ade4838574b9ef02f9523be14e6cb2f
-
SHA512
bbb297eb1389c9e1b2e1adc69e84669be92b88faea37750365b22f7426d3320860e20f16a4e54243940c28aab194f26a23a7067c0c38feb000370b318666883f
-
SSDEEP
24576:vUyO3tE6YHAUiqP+GhB9vdQNYWfcE0dDl:vUyIYDMEB9vdQNYqP01
Malware Config
Signatures
Files
-
PO2800065.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 969KB - Virtual size: 969KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ