Static task
static1
Behavioral task
behavioral1
Sample
PO.exe
Resource
win7-20220812-en
General
-
Target
PO.exe
-
Size
554KB
-
MD5
1768c54a6a4818e0d674a390c6abf5b1
-
SHA1
2e613034abfc4c7fb1cd9fe3e4ab4228940d7ed6
-
SHA256
dde008f345205986c8132477eed086b88b3e43a685eded0c60716fe996468b63
-
SHA512
0e594c99296587e481c8c836a54e89a89bfa1539f585c449241df46d6e0911f9cf84546942d852c3c2cd99ede54cee396ef1d9208a6edcd3c54b2a8e16a457ff
-
SSDEEP
12288:UQEDUFjPonExipuC09EsOQ78xlh32Yix5Matbf1V7brFAYm:vEOPonhAE4Il25MuJV7br
Malware Config
Signatures
Files
-
PO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
QmVy1- Size: 510KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ