Static task
static1
Behavioral task
behavioral1
Sample
PO24535363.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
PO24535363.exe
Resource
win10v2004-20231215-en
General
-
Target
0abcaa941295f04d8c1f625ccab318f9
-
Size
884KB
-
MD5
0abcaa941295f04d8c1f625ccab318f9
-
SHA1
48e9bdea962102bebe6017c69d1c90f08cda9403
-
SHA256
48b77a7e7a63c87ea63c7a592873f346955e2ed25792aaf37aed568bf92df040
-
SHA512
e70ea79c1bb7d65f5ab9efdf58519c2da5ec32b1632dcd3ba6a6e67292aad0fa49438701ad8e87233b9cadac37a483fa6bc5cf293335406e5214f60d43daa520
-
SSDEEP
24576:6zp/3c/hA/KIwADpgxdT3IqZgQ/cc3FUMj+pwF2:61Mq/KpOyg7F4xo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO24535363.exe
Files
-
0abcaa941295f04d8c1f625ccab318f9.eml
-
=?UTF-8?B?66qp66GdX+y5tO2DiOuhnOq3uC43eg==?=.rar
-
PO24535363.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 734KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html