Static task
static1
Behavioral task
behavioral1
Sample
PO.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PO.exe
Resource
win10v2004-20220901-en
General
-
Target
PO.rar
-
Size
665KB
-
MD5
69079a64453230edb0f7c2b4dd5b6bee
-
SHA1
c26a3d9ff7385d5016130a493c45d5b986be7035
-
SHA256
713dbd764263bcc825d55143e494b0717d8f5a067b76433a490a72312f7fc56f
-
SHA512
48534438952ce5e898522a5dade269a591a19487e4b7b7f544870cc63a9fbf68b4da7860db8cad5afb158190c077b85ff3946cc33a203688a3d55f94f9dbe65e
-
SSDEEP
12288:NJTgXdtlJ57FhZuQZ79S9A5WmFSZ630hyl9FEZAcuqJecKh6QcLx2QmtbH:NJEdJVFB79KA0mFs6EMlf8A1Ttc9Li
Malware Config
Signatures
Files
-
PO.rar.rar
-
PO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1023KB - Virtual size: 1022KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ