Static task
static1
Behavioral task
behavioral1
Sample
PO___946.exe
Resource
win7-20231020-en
General
-
Target
PO - 946175.ISO
-
Size
1.2MB
-
MD5
ed454133bc54d5811ad77ffd4eef1285
-
SHA1
e1717ffafa553ddf24301594cc9536439495c2bd
-
SHA256
5920959a13dfd730223c4af3d60d09858ae41765397cd48108dc397a17ce02c3
-
SHA512
a4dcced0a5764e8e230dc6e8ca65dc01e4d1b250bbefd7b5e23b5864659eba25d27d5245d8ceea9667b52ccb9a92b18917e90d90d8a6b6d261f8846dc8ec504b
-
SSDEEP
6144:hDmad57XeKl33j30xq6L4gWTWv/cbq3iR6HzTaFh++zXDDcHd8QQw1Jw1g3:hKD5L4gaWvkbqSRGWsIadoW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO___946.EXE
Files
-
PO - 946175.ISO.iso
-
PO___946.EXE.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ