Static task
static1
Behavioral task
behavioral1
Sample
Doc-102PO-207841001jpg.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Doc-102PO-207841001jpg.exe
Resource
win10v2004-20220812-en
General
-
Target
Doc-102PO-207841001jpg.exe
-
Size
2.1MB
-
MD5
0596aefc251ba32dcb538593b0616568
-
SHA1
9ceb68e35b93711e8247512c21ad2ccd6b8da938
-
SHA256
f085f0ece42084f2ce26c28a27ebc9457ae32b2ecd632b3073500b7e17805659
-
SHA512
da0d4d63ce9ecfc3d892b20f55be6769a5d28a77d9c3b7f4cb22abc51e3be604c102c1e6b7c4d7464dc8dc3f4730b204654c82292ad8899004e90cd7b4a66a5d
-
SSDEEP
49152:gbB0FQB5MLPlG5/8uMLq0u5hRD5pbjX7i4l8B/oy6kRMF4mK/LPS/yYCxL:g90sW0dRfj7O/oyBqi/TS/yYCxL
Malware Config
Signatures
Files
-
Doc-102PO-207841001jpg.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ