Static task
static1
Behavioral task
behavioral1
Sample
PO030823.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
PO030823.exe
Resource
win10v2004-20231020-en
General
-
Target
bb0aacd9a6d36731ca9a349dc3c69148a65641defc570ffa1961a0ba6ef84326
-
Size
487KB
-
MD5
355c25890b96b31a1616382153f30164
-
SHA1
9c66b50b824a834a87cc2a1c3cc3eee27539653b
-
SHA256
bb0aacd9a6d36731ca9a349dc3c69148a65641defc570ffa1961a0ba6ef84326
-
SHA512
a1be8c13284133d25dcb01ba4b84b7007fd48679da8af855c845d0960c0b76ecf59271d6043414c1a20b353cbb12c28d98e3e29dcf8187ed78c99a872f334cd4
-
SSDEEP
12288:+eASxDljQ1j+BGPESBgJv/TYba2mNjR43pyMFKtAdBzYKR:JlSl+Bw6VUbWjRViku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO030823.exe
Files
-
bb0aacd9a6d36731ca9a349dc3c69148a65641defc570ffa1961a0ba6ef84326.7z
-
PO030823.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 498KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ