PO-22HKSIHA00604-249[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-22HKSIHA00604-249.exe
Size

872KB
MD5

195ac5a6adf35efd487fa4c432925bc6
SHA1

55c81e3ec7ab856ffdae589844aad6b09e3e22c0
SHA256

d4ad5ce4fdec7a03272de766af8b37fbc6343698b02f79b90fe082805bbee4e0
SHA512

ce0de5e0a32c0971fe1d6133bb21928e2bfbcb0ece8013095cdd12783b38a4409256f9db5e827168aab464f66687081675b108143b243086aafe4a1ba5bdf84f
SSDEEP

12288:Bemi2iNQxUJ2ujBXDRL7ah+kN4AgFqqcj4S1qqNd7ZDt23CLQko9TCJ/0w:g716MVth68Ncj4SMqvZDt23lVi

Score

N/A

Malware Config

Signatures

Files

PO-22HKSIHA00604-249.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 870KB - Virtual size: 869KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ