Static task
static1
Behavioral task
behavioral1
Sample
PO 02 Nos of Cisco SG350-10P.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PO 02 Nos of Cisco SG350-10P.exe
Resource
win10v2004-20221111-en
General
-
Target
PO 02 Nos of Cisco SG350-10P.exe
-
Size
659KB
-
MD5
11ffa3a47aca2c79f21491133aae4998
-
SHA1
32fadced669e478ac7cebaf89326c044643c0ab3
-
SHA256
1dcf89460236ab5e2c0e1763060eb6c4d1fc4c7dee01a42f319bef157c8a33df
-
SHA512
db4f713d1f08c356a062f893abd15a0cbefb9d8d1cb59e5ef0a92f0c8abd5ceb35985d4cc26ac8341c1fd9abbb291d982f43059079e620fdab65ae819c8a5311
-
SSDEEP
12288:Ch7P8XvnkgfgK/EjTUKZdr/8RQJ8WnpyjnKurd9cnfXW:ChUvkgfR8jT5918Ape/
Malware Config
Signatures
Files
-
PO 02 Nos of Cisco SG350-10P.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 653KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ