Static task
static1
Behavioral task
behavioral1
Sample
PO#4802567411.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PO#4802567411.exe
Resource
win10v2004-20220812-en
General
-
Target
PO#4802567411.exe
-
Size
583KB
-
MD5
5c18fa566f453adc77481b43ca99e705
-
SHA1
c3ed631805812d3a4564e20c3f29eb9957933f5c
-
SHA256
d127a960084b0950a8ceb5ea4d1ada28102a8a6934ed63838bde4c199e2baf31
-
SHA512
3d4b1f27c18b921957a0e5c9de7f090b6b40741be1d07d2afa78683833d28887636ce8ee95a593959b06a8f17e7dfb1f7c159275ea4021b145edcf1834333363
-
SSDEEP
6144:5zk84S6dz5Tntngfc4DfBJ1/G89ihy4cDpe8e+VysCrojFYsW+1MFg13EwzjK:5zj6d1Ttn4ffdGwlleoj6sW1gaMW
Malware Config
Signatures
Files
-
PO#4802567411.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 582KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ