Static task
static1
Behavioral task
behavioral1
Sample
PO-KYM-98076.exe
Resource
win7-20220812-en
General
-
Target
PO-KYM-98076.7z
-
Size
769KB
-
MD5
8c5903b399f4b8b3032645150548c609
-
SHA1
8bf3f0878725a68fe7db5600bff847c501468b67
-
SHA256
422355f0dc1103463582c895bd52291f74fcae64b4c74a53483d01b3d04ac47e
-
SHA512
4ec49af47dab69e97b5e71677e2951068970d18466e989662da55a429028a1e06192472f9b430c990107dbdb299e3ee9f3cebd3e17cdf82bb4a10a527a449987
-
SSDEEP
24576:y/j5bF4vu+EOGwKAH+LGI2i0YsDQawJsI4o:K9b8u2Ga+CI2i0YflsI4o
Malware Config
Signatures
Files
-
PO-KYM-98076.7z.7z
-
PO-KYM-98076.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 964KB - Virtual size: 963KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ