Static task
static1
Behavioral task
behavioral1
Sample
PO #SBPO2312-007.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
PO #SBPO2312-007.exe
Resource
win10v2004-20231023-en
General
-
Target
PO #SBPO2312-007.ace
-
Size
569KB
-
MD5
83ead7fdcf134d2e6e6ba4a356e27813
-
SHA1
60590d4c6616dc65bb2a6d6af1b97fca87c43b29
-
SHA256
08fe61636ab92dd74674ed3834efa96abcb88b421ea52c89f84b3988e62cfc84
-
SHA512
cff36236737a103a5bcdef3ac6b975bc42e3294d71d435d8af8ebedb352053d4c2da8e3c43272256b97c38d8792213557d62bc6f009bf93f4b977b38d827b6df
-
SSDEEP
12288:WEeSEYqyMFLHfDRMGVLpgfKIS4AQnN9NBvzWzM8NazYdKjGQm3LyGrc:WEaYqdLHtMGVLSKIS4AkNfAY81Ku3L5g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO #SBPO2312-007.exe
Files
-
PO #SBPO2312-007.ace.ace
-
out.ace.ace
-
PO #SBPO2312-007.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 599KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ