PO-11059021022021[.]r11[.]rar | Triage

Submit
Reports

Overview

overview

Static

static

PO-11059021022021.exe

windows7-x64

PO-11059021022021.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

PO-11059021022021.exe

Resource

win7-20220812-en

formbook bwe0 rat spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

PO-11059021022021.exe

Resource

win10v2004-20220812-en

formbook bwe0 rat spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

General

Target

PO-11059021022021.r11.rar
Size

596KB
MD5

7e534d76e54b464ad7a1c2b5174c5e21
SHA1

49e8f2fdd718517bce0f592afe1a2f3002c2a19b
SHA256

9bf49205da5bd4ccef550149721a76c84b6e1bda27bc2e93f59842802ba22ace
SHA512

a0d47b820b7f0f527d20130e5ccae839e6f5970157e2cf86982910744705da3b5d54516d8b0c8c2a67ada5250a0c69901ad739413fb0a46138245c27de44b65f
SSDEEP

12288:mYboVzHTYieU7oDlw+S37uT35R8Ja8jr7EFYUEmQsrx6mMEA0JW/mq:m86ciV7oDllS37OOhmv16nEA0Vq

Score

N/A

Malware Config

Signatures

Files

PO-11059021022021.r11.rar
.rar
PO-11059021022021.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 653KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy