Static task
static1
Behavioral task
behavioral1
Sample
PO HOI-2024-055.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
PO HOI-2024-055.exe
Resource
win10v2004-20240611-en
General
-
Target
d04a4d35f420685b9d2c4f8ed2e2f46944894e0a80352f0aab3f4f522e5355fe
-
Size
749KB
-
MD5
8dd9373d457f7ee5be8c225d96959a61
-
SHA1
c581ca78b6e63595857ec50bed893cc009a8672d
-
SHA256
d04a4d35f420685b9d2c4f8ed2e2f46944894e0a80352f0aab3f4f522e5355fe
-
SHA512
f26a89f6d0b06e841302c6625ccaf9f582ad412e8c84014e466a6528ea2ee737f5e201ddb887b454f56e81022d038c242c17e15f6c722660eb89a267f53e14f7
-
SSDEEP
12288:N0ZXK+qX83NIpvTjU6lNF584kJTYRvuGWywwzJs35QDe1d6ZH6zhfKt+KfuZ:NsXK+q83NIpvT5lf5847RvuGnwwzJs3h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO HOI-2024-055.exe
Files
-
d04a4d35f420685b9d2c4f8ed2e2f46944894e0a80352f0aab3f4f522e5355fe.zip
-
PO HOI-2024-055.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 857KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ