Static task
static1
Behavioral task
behavioral1
Sample
PO-000001306.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
PO-000001306.exe
Resource
win10v2004-20220901-en
General
-
Target
PO-000001306.exe
-
Size
819KB
-
MD5
c0b086ea1753b821bab5615fe90ee215
-
SHA1
4f049dd47e5d47c5e6486c38c1829b7a37a7bfa3
-
SHA256
a146acfa60d74e1bba11363ac6df213b4428f642dd17b336660d87198ebdecce
-
SHA512
4cf4faac2c6461a307b09e804b8bea2d4ab65f3d8369059f67caa20e1fffe16b1ffd7715de1694f1e2a67f6e8b0349c06d6deac4b9aac3de5e00776e03e9ec09
-
SSDEEP
24576:u1dH+ASIWuP0AOSElsHo6F0xMpqG4yPa:uPHrSIWNAO/uWiq
Malware Config
Signatures
Files
-
PO-000001306.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ