Static task
static1
Behavioral task
behavioral1
Sample
PO2302841R2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO2302841R2.exe
Resource
win10v2004-20230220-en
General
-
Target
PO2302841R2.exe
-
Size
1.2MB
-
MD5
6e4e9358322821e9c69fa70a7f1eebb9
-
SHA1
7f835b755ba442c3644686f822c16b9ac0ddd4aa
-
SHA256
d1152b70f5918e5fcb1e0648d485d7ed5b06a2394bf182ff0a1049cabb04d065
-
SHA512
04fb1431db4fc8cb118075b58a351cac9a142e4bc3ada26994c8488267d957c774d8b533dbe29551f5467066165ea1e953dd8afcbde2538007b1e70f7b8faf1b
-
SSDEEP
12288:MqrExSjcPI40hXvNrJdLjN9/dF2KVLb1MfUZ:MVxSjrPhfdJNN91RpbefUZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO2302841R2.exe
Files
-
PO2302841R2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ