Static task
static1
Behavioral task
behavioral1
Sample
Signed po_000165.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Signed po_000165.exe
Resource
win10v2004-20230220-en
General
-
Target
Signed po_000165.exe
-
Size
1.1MB
-
MD5
c125d39a5c36ceb3561c38c86c0f74ff
-
SHA1
ee54939ec90d947049e2be343de7c42f9472df02
-
SHA256
1bd8f3260eef97220ff4fbf88e4e4005832becf5a74742c2bd2fbf542e446972
-
SHA512
a5cdd216d6cb680c3415b88c9bc4c2accec6301f6d38c57d81d14bad74c1cfb9b5605b4384f095b3375bb03a90f3591eb5a79900c47defd5e2d5665f8af43d35
-
SSDEEP
24576:vA5QvV9xxFzUYAMTZ8Mysn3HeFD8UW4Uw6ATp1wUb1QiD:Y5cxD4VCLyk3ev5p6A8x8
Malware Config
Signatures
Files
-
Signed po_000165.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ