Static task
static1
Behavioral task
behavioral1
Sample
PO-8730937.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO-8730937.exe
Resource
win10v2004-20230220-en
General
-
Target
PO-8730937.exe
-
Size
848KB
-
MD5
c540909bc351506ba725c121cbbe7f96
-
SHA1
caa89f18d8efdb450208bb4946fae937cc7678ad
-
SHA256
224d4e4004dd673a5d633815a08b64137f93d1002c07487e87c95ed131c14484
-
SHA512
413cad4e99714eaca7e14c717f9dd3252646665cd497c9746bf30e9f0462087a7bcad4e1bf04c498fc555c8992970c5dde26852075972661884a95aeac1aad12
-
SSDEEP
12288:dTuWJsMSz4oqtmU99ofSsszKqhyFvj/tGrMnTYozWhX50UGJlcy7zDaU6zBeXlKC:9sMSz4oqtmUofSstvrtG+TlgeUUH/
Malware Config
Signatures
Files
-
PO-8730937.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ