Static task
static1
Behavioral task
behavioral1
Sample
PO_CW00402902400429.exe
Resource
win7-20240705-en
General
-
Target
0785f5ce5fc16abdd98282c52faf8f46f69bc41785c02e5138373411ef6fa663.rar
-
Size
532KB
-
MD5
1c3bd1958039391e6417819de59c7a8b
-
SHA1
b924b7320e4c7106c06eb0aebf4b8b3f8b8996c9
-
SHA256
0785f5ce5fc16abdd98282c52faf8f46f69bc41785c02e5138373411ef6fa663
-
SHA512
2040d6e7855f62526cc171e8ba3845cd7b72dc39cd4697febe9bbbeb0da99766cabafbeebfbe4a78b7e41d5acfd74d4af4361361f52895de71a3db8cd11107f1
-
SSDEEP
12288:7lQecgtK+/v7kodzrAEto4eOi2NkmqyxSZKWePAPf:hQTgM+l/AEC5WNumSZKWePU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO_CW00402902400429.exe
Files
-
0785f5ce5fc16abdd98282c52faf8f46f69bc41785c02e5138373411ef6fa663.rar.rar
-
PO_CW00402902400429.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ