Static task
static1
Behavioral task
behavioral1
Sample
received PO Ref-28414779.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
received PO Ref-28414779.exe
Resource
win10v2004-20231215-en
General
-
Target
055d8df9f7096092a779c271a48feb74
-
Size
606KB
-
MD5
055d8df9f7096092a779c271a48feb74
-
SHA1
f04a3bb81527033c6891daf1063eae822e8fd5c4
-
SHA256
762fb1683020a79af732503a2a75eeaa1c4c3f844472f50e5b955a71297f2565
-
SHA512
57ad31340fd5bd4868120fd7feb891470df5b07fa2ba9ae9602135976c04abef300ba647ccf82870f7dfac3d06183dee7ec54eb1370aa59e2ff6647ff56c8b18
-
SSDEEP
12288:8nH920T1i8LPhnIBhXWHBd2+i5OBvi4MNa5cG65ZSyEPv3yADMecOOJHy:AL1i8LPhnyXWhd2+i5OBvTcG65ZSnHfP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/received PO Ref-28414779.exe
Files
-
055d8df9f7096092a779c271a48feb74.rar
-
received PO Ref-28414779.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 946KB - Virtual size: 946KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ