Static task
static1
Behavioral task
behavioral1
Sample
PO-002112023062700.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
PO-002112023062700.exe
Resource
win10v2004-20231023-en
General
-
Target
PO-002112023062700.exe
-
Size
730KB
-
MD5
d7d087c1e8140e13ce2f8bea162d0844
-
SHA1
9f32406d5d6b52aba9a08607678a3e28be99c599
-
SHA256
8d767518bdc0fda97fa2de2cb1ccfaf88f99bb98f5b9d3adfe625a658a37f77f
-
SHA512
e2cae7d2b3a6a6fafd36538c6a4bb30ad3f741c1cf470e22cba07c98c6ca945e6d10e3bed592cd3c003d0463730662f4bd171adb822aa123b7a28a633444f0d4
-
SSDEEP
12288:n725Bj/0MHZQ7Y5X0+x1Gozsi9JMpxUqkw2HGsae:C/0Mqix1xoiv2URw2Hha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO-002112023062700.exe
Files
-
PO-002112023062700.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 522KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ