Static task
static1
Behavioral task
behavioral1
Sample
PO#50124.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PO#50124.exe
Resource
win10v2004-20240419-en
General
-
Target
092b37bf4845038e86a1d8abec9e3c2b.bin
-
Size
633KB
-
MD5
4fc4f3fc02f5277cf2be8891d80aa1d7
-
SHA1
4ee44822d7b06d0975a13ac206c4c1c72175b6c8
-
SHA256
9ef6e15de85ecf471b02bd8e21025ef119670194f53e0f3ec47daada3f5c6ee4
-
SHA512
82d641e2f01dfd1126dabd741475fae86ccf7f09b5e2f8925f4efcf1ac5fea8fc1f04412ffad42067282a88661b6ba233fc3b3239170f8747c74119fcbe1d711
-
SSDEEP
12288:9m5xITlBrBTy1jUcSEKRD67Csuxt8H6U8kVbKOHxLFikN:9m5xITlBrU1HSEsht8HaiQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO#50124.exe
Files
-
092b37bf4845038e86a1d8abec9e3c2b.bin.zip
Password: infected
-
43f5a0ad4ae35c4c9d6506f5bb2dfd6f676a21b93e71acf685dd950ba01a5f9c.zip.zip
Password: infected
-
PO#50124.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ