840037df070b0605740447bad28789ed5ae419587901967261c631ff9ca73ca6
- SHA256 840037df070b0605740447bad28789ed5ae419587901967261c631ff9ca73ca6
Behavioral task
behavioral1
Sample
1.0.3POFU0/Pofu_Win32.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.0.3POFU0/Pofu_Win32.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
26 signatures
150 seconds
Behavioral task
behavioral3
Sample
1.0.3POFU0/Pofu_Win64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
26 signatures
150 seconds
Behavioral task
behavioral4
Sample
1.0.3POFU0/Pofu_Win64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
26 signatures
150 seconds
General
- Target 840037df070b0605740447bad28789ed5ae419587901967261c631ff9ca73ca6
- Size 10.7MB
- Sample260929-gbfa9afb44
- SHA256 840037df070b0605740447bad28789ed5ae419587901967261c631ff9ca73ca6
- MD5 1059f8ed3104c8c535553c9b08e4c1da
- SHA1 191ff84171a42acddeaf1f1ea326ecd1c480f40a
- SHA512 9d00756ca6bec6af164702fc471086a8b4af6126bf1bc2b7320d6ebb3ffc2b52e594909ab7975e7f642b9dcecfcc18cfe21a4b7909219bd9c8076b0a5092ebe7
- SSDEEP 196608:ty/wJRdRuO83KtYzPm2+blZyskgCMR6U9YKFQDeUWOf1Bi/M09gm2l8Re0Q:E/w5axzt+LlkgVYUdbOf1Bj09gmHRVQ
- TLSH T167B6330B73A56BC0E932577020B9AA73FB72431932627D911FEA68276C9361C7D2CDD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/1.0.3POFU0/Pofu_Win32.exe upx static1/unpack001/1.0.3POFU0/Pofu_Win64.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/1.0.3POFU0/Pofu_Win32.exe unpack001/1.0.3POFU0/Pofu_Win64.exe
File Explorer
-
840037df070b0605740447bad28789ed5ae419587901967261c631ff9ca73ca6.zip 10.7MB
-
1.0.3POFU0/Pofu_Win32.exe.exe 4.6MB
-
1.0.3POFU0/Pofu_Win64.exe.exe 6.1MB
-
1.0.3POFU0/license512B
-
1.0.3POFU0/sha256sum.txt557B
1.0.3POFU0/Pofu_Win32.exe
- SHA256 2c45ed3b060d12ad74cab8bfa051b0910e899623f78aadb9207c782f87c24bdf
- MD5 2d696c00c4f9d44972f0263369795711
- SHA1 b2363eb992633a96a14d5a57bdbf1759618950ff
- SHA512 430276a752515fceb9aa61a3d0f763dffbbebc81ffcb2f3ffa2dd9362c980f36f0f92a1184675b5ac2dcc4b243a21638801dc284b92db838db1d481e6b70651f
- SSDEEP 98304:Bz2kp1zQ9zxhL0Vq0tgk3blYyGYyZ+rDThGZARgaWTZ:0MpQ9zrL+gk3OLiThGWgzTZ
- TLSH T19526333B3286B2C5D82517717465AE1FF731826B9322BA933F782137AC023AC5598DD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
25396272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
UPX0
Size
Virtual Size
19.6MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
4.6MB
Virtual Size
4.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
1.0.3POFU0/Pofu_Win64.exe
- SHA256 a231fc019c3f2d04005b69c00eba0052c2cf06e0dc0f542399c4dcb9845b22b8
- MD5 b0dcdf9fd9e91247485502e986723bda
- SHA1 365f1e9e9f5846050221d37cb25a0629ca4be117
- SHA512 f05846ca6488c3908f3b91d3384cef398452e43495bab2d7f7100951ed76777e96028ea9b2deb1c7dc72996763554d70fe39980cda994b19cb2e48df5521f79d
- SSDEEP 196608:okgCMR6U9YKFQDeUWOf1Bi/M09gm2l8Re0:okgVYUdbOf1Bj09gmHRV
- TLSH T1FD563307D7B94F20E762A67402FAA2B12DF3531831A16D908DCB6C161DF3E0EBD2D990
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
29135008
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
UPX0
Size
Virtual Size
21.7MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
6.1MB
Virtual Size
6.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
1.0.3POFU0/license
- SHA256 5f8f0ae6fbda1f95624d2f68b298df534a9a7635f745d608f6a1d91271d61ef5
- MD5 ccfeeea7284c43de40c37d447b53e103
- SHA1 ebab9daab52642920ace43280dccf160e9a4445a
- SHA512 8f03031bdd773dc72cfcddfae5373b01cfd8ef2f9137cd7b70b07d64805d6dcdaf0a75e91de1bf3401a2869178141e29bdfb113d3bec8556afea79d1f0c3c59b
- TLSH T1B4F0057375D72C42641523650C4735A5406809C3E377C6CC5394ECEE5BE2C4443246CD
- MD5 SHA1 SHA512 TLSH
1.0.3POFU0/sha256sum.txt
- SHA256 9530247bf091d866d41951f4e039b2cb5f9a8bb64c2439ebc808fddd6eb432db
- MD5 440b5e1e1378cb5bffd6e6894ca37131
- SHA1 356d78f2018397e46b503d6f2d32372d6317fb34
- SHA512 26b062cc2e03275abc02abc1e675307494b174a08f4224ef452627530fe3a2c08f56329ddc4ddc56717fbd083ef112860abbd4c8f2f557a4296a86f1b9adf345
- TLSH T15CF075B82F80205341E310B5CEDBB942F587D5E882AF00976BBB65139863534F7B0C8C
- MD5 SHA1 SHA512 TLSH