Static task
static1
Behavioral task
behavioral1
Sample
PO-8730937.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO-8730937.exe
Resource
win10v2004-20230220-en
General
-
Target
PO-8730937.r17.rar
-
Size
673KB
-
MD5
7fe058f23d9f6de3a1e4821d6f00050a
-
SHA1
4046fcb4ebefcb92c5d5121bf75d61367d616e81
-
SHA256
b6f728b4472cd78162539c4a634a7ab5765b4dd7294dcf7533b4c07c2280b90e
-
SHA512
5536b15ca2f9638f4491e6424954a982e9dca631933b6609256b31191cd1e03be9f0a5cd60d1c0603a8bc6ab08defb89e256008f616b9d287e147b281275c09b
-
SSDEEP
12288:wIsQwyH3YsYg1iTiInAplGrm0wmXWc3qgzieuhdyQnSNtXBtXPYNqkXSK:wIsQvH38g1iTi98wmZ3qLd4xtfs
Malware Config
Signatures
Files
-
PO-8730937.r17.rar.rar
-
PO-8730937.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ