Serviced PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Serviced PO.exe
Size

566KB
MD5

10cdb36ce485f7f1271eaae74616d31b
SHA1

26f48623bbe45ebbe241af5dffdc5883e0de22fd
SHA256

ec04eb354840d507289392cd629a2a3cf5b7703b64af8731a995a6b63b983017
SHA512

dbfd704d6ea47165a3b55c832ebaae28cf3327aed5d1439544f8fe1a653708122aa23a12c03768808b6849cbf69ff4cc5167cce71a46ae8511504331e3d9abd0
SSDEEP

12288:N+hULS94ZGVPCbRFhkQ9Ki7cSFa9UQB370ABvZPyIlEnukzG3:N+hULS94ZGVP+Lhii7cl9T370ubEu3

Score

N/A

Malware Config

Signatures

Files

Serviced PO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ