Static task
static1
Behavioral task
behavioral1
Sample
PO 5002407962.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
PO 5002407962.exe
Resource
win10v2004-20240226-en
General
-
Target
PO 5002407962.exe
-
Size
1.2MB
-
MD5
aec18c694fce000f07ae7dc56653bff0
-
SHA1
840635306bec9a2ec62d9c12fd19eece134878cf
-
SHA256
82e145d3a3699341fd1baab548a2327fa87e642e7734b8b12121f24e072ec9d9
-
SHA512
cbb1849e23bb055ef059ad1b5c32823edc2fc52151a9d55a0c1f84a381687b8717175f00e39fbbdbf3b1fc4cd8341b56f492fc218202f8e9e9a7f4211d014ef7
-
SSDEEP
12288:eARmQ3lR3IYGg0RAbueIKU41eksRz+goaoxmQa3/tYCSbD/PxN:3Z5GTRAqVUeksRzjojG3SCUD/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO 5002407962.exe
Files
-
PO 5002407962.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ