Static task
static1
Behavioral task
behavioral1
Sample
PO-000001407.exe
Resource
win7-20240903-en
General
-
Target
c64f73c8cd3d0b13509324efcbfd6e08bf7140c5672953309165367f72750020.zip
-
Size
690KB
-
MD5
fa356e1a6c60f37d4cb018296fae8e66
-
SHA1
b14b42e7cae95a8ec71fc3e6065a8cfcd3b17f40
-
SHA256
c64f73c8cd3d0b13509324efcbfd6e08bf7140c5672953309165367f72750020
-
SHA512
729044312f2d06c9f6d1f361bed564e411632e653c5f000ee649d9dab2d5e57d0b2c33431a697f7623d29fdf01ea25e4d8b25fed8ab45f96b9cf4d78aa232d78
-
SSDEEP
12288:4kRyK53fFGm+CRLYj5sPgBtA4r0koyvqWJ6hjv5uBGnYvgmoESL36wjXKa:dR7XGm+yLx8trr1oFZhjv5uEYIm+LqwB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO-000001407.exe
Files
-
c64f73c8cd3d0b13509324efcbfd6e08bf7140c5672953309165367f72750020.zip.zip
-
PO-000001407.rar.rar
-
PO-000001407.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ