Static task
static1
Behavioral task
behavioral1
Sample
P.O 124.exe
Resource
win7-20240903-en
General
-
Target
P.O 124.exe
-
Size
603KB
-
MD5
5a7b139855700ca803dbc54daa52567e
-
SHA1
ed76b03d085d9a11a410c4f2bfa056d6c9639176
-
SHA256
223786813c2b26e84549506a10b63d6a7c619f99551cf4abaf636d1588f8a001
-
SHA512
64def05a152fc1c10ef1c8d27e27ef33338dabb5665d8d6897f6d7db0388cfbfc2a42a808ecdda96ce32d7dd14221ba4c84a22333626f26b40036fd0a83d6d2c
-
SSDEEP
12288:QOq8bQbKxrRaWJyBpk5Qs+/hsJntO3XOJWkdzdwSjNenBr0Q+p/PKxxQtmvV:Q0IKxhJwkO/intOOJNdz6ENGBYTZaN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource P.O 124.exe
Files
-
P.O 124.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ