Static task
static1
Behavioral task
behavioral1
Sample
PO 42236903.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
PO 42236903.exe
Resource
win10v2004-20230703-en
General
-
Target
04312b533d333def23d09ee3bb512af0.bin
-
Size
423KB
-
MD5
158ccbd498a61d57e494806792abaa68
-
SHA1
2a4e481b1243293c60a07c79e58f46cb3bce9376
-
SHA256
833a673ed620dfe13c99401f5c3fb2a72c5048185210c67ca1bd33d881b52dfc
-
SHA512
6903f0a7de5f673b47f929ebc971e379b6e2eb1d6fb1668634abae2f83fb0447d4d4e55c7a175afc07e7183f55cb7511eb3143013ad6316fd43001b3b4d021dc
-
SSDEEP
6144:TlJf8DYtXA9+8XUtSfBV39Czw3N6yfYxpkPdW3IqgGvU59ZM5gogz4B72GMMxSeI:TzE+7EfBVNCzwdzA5U9rZz4AhYSesoA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO 42236903.exe
Files
-
04312b533d333def23d09ee3bb512af0.bin.zip
Password: infected
-
ddb0a6bc96896dbf8f065fe84a824093ccb52d8a2498badfd5ab00348fbd5bab.7z.7z
Password: infected
-
PO 42236903.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 618KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ