Static task
static1
Behavioral task
behavioral1
Sample
PO #7A68D20.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO #7A68D20.exe
Resource
win10v2004-20230221-en
General
-
Target
PO #7A68D20.exe
-
Size
607KB
-
MD5
936ad060d305777abe3236a92c372191
-
SHA1
f87c6adab0fe0fe692ae1f37267eb5603d623f92
-
SHA256
87d4fc256d10292ca6218562878fafc31768db85e9023726855edeaa9a2a0b56
-
SHA512
f2d305c52eb76087ade9186308c2a9e780e87ca23fdb85f212db59dbfdad67b8587bb0eb18ce09b81fb0b750fe2b75b8bc7730e7bbbeafd9b232d8f7968f8b5a
-
SSDEEP
6144:AxEdljrN2GhNbCDyldroVNuoP7/raKQc+KYLeTWQDIxYWbqRwujDGdtTc/G5nHDm:p52iN2uldr6j/KqTQYCujDktTcGHD
Malware Config
Signatures
Files
-
PO #7A68D20.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ