Static task
static1
Behavioral task
behavioral1
Sample
PO#206.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PO#206.exe
Resource
win10v2004-20230915-en
General
-
Target
cc96a96dc0fefd0e7e030620803b4e48b26b8475d285c3a76ad016aa33a8f922
-
Size
624KB
-
MD5
4e0b9dc1983482e11742390038b89ac0
-
SHA1
c0b933b9916864456095d5f30dc88836389c44b1
-
SHA256
cc96a96dc0fefd0e7e030620803b4e48b26b8475d285c3a76ad016aa33a8f922
-
SHA512
a60229b1624585368253a58c6a71a66cb00d320bffac09acc1f5f52d9d4d5a954a530e41ef180c72bdc1d61fb0a1dbb34075354e537d6b3d7fcadfd5098d5d6b
-
SSDEEP
12288:x9ZNehWOuVXOoi3CtJZPs7I0EUmoSDax/b3r+F8gkDkkdFBmBwNh:xBeh6Li3CtJVs7I9Umyx/b3rc85/dFBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO#206.bat
Files
-
cc96a96dc0fefd0e7e030620803b4e48b26b8475d285c3a76ad016aa33a8f922.zip
-
PO#206.bat.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ