Static task
static1
Behavioral task
behavioral1
Sample
PO883739.exe
Resource
win7-20230220-en
General
-
Target
PO883739.exe.bin
-
Size
905KB
-
MD5
611781b78a6fe7f7b3edcd1288d67bf5
-
SHA1
5066a4bcdd728242eecdbeff85a913d8fefd9850
-
SHA256
fd07424319841f436b7aeab83c5e449b99957183beea80340cc968adab5ce46a
-
SHA512
09af3763d9d42505f017d9873fe30813dd7386235daa30b40af07347da4e05c54010d7315fab74a35f138bfc88023aa44cd1a82a14718bcf134a4d056b203ca3
-
SSDEEP
12288:YOQjAtWdATeYNEiHB4B3yDrhqNXZUZzBVWWdOwWDOLu60P:YnkAce/iGB3yRq0JWDOJ0P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO883739.exe.bin
Files
-
PO883739.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 718KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ