Static task
static1
Behavioral task
behavioral1
Sample
PO-178 ,PO-113 and PO-176 (TT Copy).exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PO-178 ,PO-113 and PO-176 (TT Copy).exe
Resource
win10v2004-20240412-en
General
-
Target
5da4a0ab8f5d1c2098f5d37ec8a94e5824e7998b0e8aa094ecf9c78a33be4c23.7z
-
Size
255KB
-
MD5
f2531a6c136389d1b485a6e91b727821
-
SHA1
95009c631068f0c126dc883e723c2c28ad089f3b
-
SHA256
5da4a0ab8f5d1c2098f5d37ec8a94e5824e7998b0e8aa094ecf9c78a33be4c23
-
SHA512
50af8ed6fd3e9b9c746c6989f9e84de5cff9b799430a9141db9afba5af43f503c4ff0b5354360e73085254a1fa14ee655e4892e61b39b5c187a2cccb8ebd2429
-
SSDEEP
6144:5XooyLhQfNBriuQYmI7G6xrfdVnbERcYGNNBVllYSpmx:O1QfNBeu3mIycrfBV7ex
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO-178 ,PO-113 and PO-176 (TT Copy).exe
Files
-
5da4a0ab8f5d1c2098f5d37ec8a94e5824e7998b0e8aa094ecf9c78a33be4c23.7z.7z
-
PO-178 ,PO-113 and PO-176 (TT Copy).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ