Static task
static1
Behavioral task
behavioral1
Sample
PO 738900.exe
Resource
win7-20240508-en
General
-
Target
79f3f61ce35754dd4a5f3f94297af6c529671f27215af4eac1b0a71807b9e615.gz
-
Size
962KB
-
MD5
a95ea5ce1e3314a90767322439f7a809
-
SHA1
25b20353529f0e9627e8f53cbfb993cf6dd87608
-
SHA256
79f3f61ce35754dd4a5f3f94297af6c529671f27215af4eac1b0a71807b9e615
-
SHA512
a5398907d16cfbca8e021b4641e7802d6e9e0044d6372db62414a6bc0c6f3b356076805532b45cf3caf8e5b087bcbec99d2bbded21acb49e1028a0a0fab11b5d
-
SSDEEP
24576:MqMNL9Mq5vxIN2eP0uwiK39GisTOZaImGNepZb1QQOlDqGNRQy:30L9MqHIQswp9sqgZb1mlDqPy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/PO 738900.exe
Files
-
79f3f61ce35754dd4a5f3f94297af6c529671f27215af4eac1b0a71807b9e615.gz.rar
-
PO 738900.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ