Static task
static1
Behavioral task
behavioral1
Sample
PO350.exe
Resource
win7-20230831-en
General
-
Target
cefa523cb435720c81c933c07f02f2c3f09979228b8d6a43309724892f335ee0
-
Size
906KB
-
MD5
1049d7dddfdbba574c041fae2cbbe326
-
SHA1
0066ecf82a2560a64b7424c9471663f04669fa15
-
SHA256
cefa523cb435720c81c933c07f02f2c3f09979228b8d6a43309724892f335ee0
-
SHA512
12babd6d6c04dd7601730549183668fa87a902b8b723c44553378ad10ffca3c1d5ef78bc44c9ff608173c9878476dad72d70db6a61dfe5054e6e588bac5b1167
-
SSDEEP
24576:XgLzfHoRAzX/Y/uLyHK/VKFP5ZO8YgdCt3ufQbn:XgLbIRK4fQGFdW3IA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO350.exe
Files
-
cefa523cb435720c81c933c07f02f2c3f09979228b8d6a43309724892f335ee0.zip
-
PO350.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 992KB - Virtual size: 991KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ