Static task
static1
Behavioral task
behavioral1
Sample
PO-20210292.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
PO-20210292.exe
Resource
win10v2004-20220812-en
General
-
Target
PO-20210292.exe
-
Size
666KB
-
MD5
ab5211704283ceb05252c1e40b5be1be
-
SHA1
7c43841ded13e8b06a13a78b451327c622f734ed
-
SHA256
e60df4c4e0c5fd9cb3bc3863d6ca5e668f44120187dd66fa0239c0741653e5e7
-
SHA512
a360b115280d12b31120b9fd8c6994316e789dfdad138f273ae0ede12806007091933cf100027105cf3929d3f685fe371647a5386917082a68506abe34f97ef7
-
SSDEEP
12288:wf1aPhVe5d6U6sRg9db30NOQA+/7lJ4NfEXq2rscAhVDPjytjEYcIeMih07trIaf:C4LsRg9db30NOQA+/7lJ4oYc2jytjENk
Malware Config
Signatures
Files
-
PO-20210292.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ