Static task
static1
Behavioral task
behavioral1
Sample
PO-001120230627.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PO-001120230627.exe
Resource
win10v2004-20230915-en
General
-
Target
bbca50cd8c0369e15b01fc8bd05bc78070e9d3efe41892cb0d270840c0225978_JC.7z
-
Size
543KB
-
MD5
b7801096f2b7540a5995efc313586ab1
-
SHA1
ca373fb871efeb2a8bb134409d929bd80f322545
-
SHA256
bbca50cd8c0369e15b01fc8bd05bc78070e9d3efe41892cb0d270840c0225978
-
SHA512
70891f1977b807a7dbe77bfa698c7cb32e98a624bc064a7c10806f748fac98b4cfef25d3cd0121a3eea4867bbc96a5a9308f6b209e99efbb0e45f48bae0cf0b4
-
SSDEEP
12288:pK3bjr9VzqLGqLvIqBSkyPTzt0+uolINZveq:SjBoaqL7Byy+RWmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO-001120230627.exe
Files
-
bbca50cd8c0369e15b01fc8bd05bc78070e9d3efe41892cb0d270840c0225978_JC.7z.7z
-
PO-001120230627.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ