POSMK15092022[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POSMK15092022.exe
Size

364KB
MD5

bac6dfe18b16a9a129469523360f2d83
SHA1

c0ad4e2e581a9042948bec2e690738e25d4aa19d
SHA256

889c2b290cea97e5f27b6faf46252f46a1fe57abdb15a5bfeda50957ba9445d3
SHA512

97b6044304e263da304ef58b9d0d5d2452646274200b7a02e921f476d8a212e13bc8a5c8748a84c13651a1e634c676fb2945d36206ee4358e6aba50d76331901
SSDEEP

3072:sPxwE7T8K8IZ1mGsvouIg7nlMk5NmztUnzcLjmV0j+LR/iLt4eVP6lX+G5arrHRW:4tmrVGz+LR/Yt5VPIX+vdDzOJt

Score

N/A

Malware Config

Signatures

Files

POSMK15092022.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ