Static task
static1
Behavioral task
behavioral1
Sample
PO.20230187349931062023PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO.20230187349931062023PDF.exe
Resource
win10v2004-20230220-en
General
-
Target
PO.20230187349931062023PDF.exe
-
Size
781KB
-
MD5
f60fe7069b3b015056220d3c6c101c41
-
SHA1
200669722c847114a4a622ac8b3b364ece1c3ff7
-
SHA256
1df9f507ed70f0454481d9b71802db25fda435464628cada52f5d8d86536c4a1
-
SHA512
71505770c6ac9fc1d6bb986eef5bd27ca37c8c9c3f3fa2eb11ed6f2a2c69705bdb8451f24aca9b4466fac1f8b9a09a1c75324f18860e68fa8fcf21573d8ad7d5
-
SSDEEP
12288:w5CBWKdq1FbwwJLwrnlMXO0poc7KV5jkyMFe4CrnK2hxsLpK/N:TfrpTlMXOaoc7KLjkhedK2PsLpKF
Malware Config
Signatures
Files
-
PO.20230187349931062023PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ