Static task
static1
Behavioral task
behavioral1
Sample
PO00036881/PO00036881.exe
Resource
win7-20240704-en
General
-
Target
02082024_0138_01082024_PO00036881.Zip
-
Size
1.2MB
-
MD5
a538a51df9bc51ff53bc663fc8cb0d9f
-
SHA1
8a9ee482b8c3d59afb6bad7f1b51f1424c3c2327
-
SHA256
82a7d9fc059566fde996066d136a82201f5d53106060959f6199bffc8b0308c8
-
SHA512
5409b5f5fe5d656ba56def2894d2cd2f3e2aaecdf9a55dcc6982f0fc53019205eb0c8baa7e7040e110e2f8c8d8685c67ca5ae318c927aedff7605a0ae8314602
-
SSDEEP
24576:payzwu5ZkKECnikmVWmLGVyyIyZ7/8/vAagY0pNKBnnXc8ey241JCq8N:pay7kKlnrmVNLKfZLQhgZanXc8eWJYN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO00036881/PO00036881.exe
Files
-
02082024_0138_01082024_PO00036881.Zip.zip
-
PO00036881/PO00036881.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ