Static task
static1
Behavioral task
behavioral1
Sample
IMG_Scan PO-EPDAs & comp POs, PSB-17398902, PSB-18384789.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
IMG_Scan PO-EPDAs & comp POs, PSB-17398902, PSB-18384789.exe
Resource
win10v2004-20230703-en
General
-
Target
IMG_Scan PO-EPDAs & comp POs, PSB-17398902, PSB-18384789.r00
-
Size
440KB
-
MD5
b68d9c67917154772f0af78536d42f9f
-
SHA1
5a35756f4cbf573ea147b10db1fe49cdec0ceda4
-
SHA256
7dae16df2e64723a97b4c756fc2d5c307ee8b1234a47d7b8ebf1525ff5f2796b
-
SHA512
f1fcb4d3e370ec1f66ff99ecc360e450481d198b2d3f1121c0718d29d840e8b530758a07bfdb6232617ef92eb1e1421dde72a82e5f9787a3e93345ce252a5804
-
SSDEEP
6144:CpHYL0zRsoo+hBawX+hqh0kLFGCv1XkGAKRisMjVFiIkuMzTylVsOROYRdoiJ5jD:CpH3tZoInX80DLF7xkPviIFI8NYUJ2vy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG_Scan PO-EPDAs & comp POs, PSB-17398902, PSB-18384789.exe
Files
-
IMG_Scan PO-EPDAs & comp POs, PSB-17398902, PSB-18384789.r00.rar
-
IMG_Scan PO-EPDAs & comp POs, PSB-17398902, PSB-18384789.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 626KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ