Static task
static1
Behavioral task
behavioral1
Sample
PO. WW.exe
Resource
win7-20240903-en
General
-
Target
8cfd80896c3a9d44bbcc0ef7a91d7ab0fdc6906496e60e8bf7cddf7fae069923
-
Size
1.1MB
-
MD5
c8f8b0db2e80768bfb6f5e6f98bda35b
-
SHA1
2b49c6abd97c23fa438d70e0b0d1079860f6960c
-
SHA256
8cfd80896c3a9d44bbcc0ef7a91d7ab0fdc6906496e60e8bf7cddf7fae069923
-
SHA512
39135ba3ae919ea965a62c7cbb8cf618dd3be4ed9bc87d23a66711b6f3b72a594c07230fbe2c0087bff5a1e28dc1055b233dd39b45871a1410a54ccfc938292f
-
SSDEEP
24576:oM1+HNrjD9sg6Q8u9IVG1hcI3poYaNQ6yNoGLwdde17olA2:X1+X2g6pu9J8KoYaNLyNcdo7c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO. WW.exe
Files
-
8cfd80896c3a9d44bbcc0ef7a91d7ab0fdc6906496e60e8bf7cddf7fae069923.rar
-
PO. WW.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ