Static task
static1
Behavioral task
behavioral1
Sample
PO 87877654.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PO 87877654.exe
Resource
win10v2004-20220812-en
General
-
Target
PO 87877654.exe
-
Size
892KB
-
MD5
088aa61ca92897f64877f1731374d9c1
-
SHA1
7064f508033dd99d1cb1b1ab8125da7dc8656b2e
-
SHA256
b8848531fba261561cae57936e50512202d45257460805c92f2778331e0db85b
-
SHA512
11d82b40a37d62b3805a970d987115d981b07089501745519675cd50c12f058d0fd9088b40605e7be8fa981811268230b674d4cf9de357af0041d4fff7782fd0
-
SSDEEP
12288:fcBkUYbebIqY3rjA0AeR8bJH4wuTEj1p3HU27toeMPVRSt:qYbSRY3rjmeRi4wdjfEaHMtYt
Malware Config
Signatures
Files
-
PO 87877654.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 880KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ