Static task
static1
Behavioral task
behavioral1
Sample
PO 1500999.exe
Resource
win7-20240903-en
General
-
Target
PO 1500999.exe
-
Size
952KB
-
MD5
f0cf0e8e10232d77f4d74042e53bbce6
-
SHA1
34385ce59e343bc971e34b9c4cf58008b05a826a
-
SHA256
5a501775881bcff53fcae028a8e65f4af7bccd9323ca14ba23b519e7c7be18df
-
SHA512
22c019c757c2601e782fac6fbb1a783ed75b92613eeaf48cfe4629cfc7d5812f1b2708c17c09c7448b563911e40ae4b0591b712da8b4a4694c77132469feee75
-
SSDEEP
12288:/6DJ7IR7DT30ss4um4bIG/6xuihDGA+n5TayHKv+LAa3f75wnzx2lFt:ueF0rxmzdGA0mBvSLD5Kd2p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO 1500999.exe
Files
-
PO 1500999.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ