Static task
static1
Behavioral task
behavioral1
Sample
PO.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PO.exe
Resource
win10v2004-20220812-en
General
-
Target
PO.zip
-
Size
537KB
-
MD5
1d98f16a7878e93dad96318b3dddbf43
-
SHA1
614497c617380a17e20e2dd1e9a505ea10532d59
-
SHA256
e06e13b9339e98ac03748a1fe5b8157755ede43831320edeb1c47f37a530ab88
-
SHA512
67c4619ff49e434e17fc79b3e830a801b514f66e23490bfb984210d18857e29e02e7c53dcb395e19419dd274a3c0fbdce2b773970e0d7a3487edaf957971b303
-
SSDEEP
12288:ctcyW75s46m3+gY0aYkv2fWnEHh4ikc9AE0ibg5ppunDO:caT7yMtFu2eEfGE0ibIEDO
Malware Config
Signatures
Files
-
PO.zip.zip
-
PO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 858KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ