Static task
static1
Behavioral task
behavioral1
Sample
NEW P O.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NEW P O.exe
Resource
win10v2004-20230220-en
General
-
Target
NEW P O.zip
-
Size
560KB
-
MD5
696b30cb87de234a3f8131a513e756a2
-
SHA1
1aca5fca2c2283d636d8bd131826467e5b573fc3
-
SHA256
c445953d664120ea2412faa2e456869618554fee5faa3ddae00153ccc6a222e0
-
SHA512
bc71411b9cc18db4d3c7b843ef6650c4411916cd4be17e97c3eee7c5fa4e5e592516fcfd824810db09ac6ea518772affc418c52ea05e63a0050e3680a7757e05
-
SSDEEP
12288:hYFcJZ5lwWkamg4u9vfeRPIsw/dhO+8LELZwmWmQsJgO1N3P3I+julDUMUq5:hYFq5l3Pmg39IIPdhZLzZQsJp1N3fIOw
Malware Config
Signatures
Files
-
NEW P O.zip.zip
-
NEW P O.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ