Static task
static1
Behavioral task
behavioral1
Sample
PO#2300982.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO#2300982.exe
Resource
win10v2004-20230220-en
General
-
Target
PO#2300982.exe
-
Size
741KB
-
MD5
26863e5264d19c52113b63428a690742
-
SHA1
97bba5208adf1ae34ddd1e1917be2692c1873dd9
-
SHA256
e5abfba23ff6a7b7a2b51024addef4335a6046f13af844a912778e057e9dee45
-
SHA512
440069a51beb3a237a2a573478ced9289c3eef2a294d9431eb1dbf147c9195c3a7d29fa5bed3f29cb36a721f3579516a62f1ff3fa4e9fb054075dc0f02e8eeac
-
SSDEEP
12288:ye2iNyOe42KMu/N3mWhQmwmJCMpUekKKNab8dUwgi4CHE0OQe5K7IrZ+aOx+tuA:D1wOV/NOaiHs4C7SE0OFK+Z+aOoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO#2300982.exe
Files
-
PO#2300982.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ