Pedido PO-40930212[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pedido PO-40930212.exe
Size

242KB
MD5

055e06b886b9960d2fd3e602a4c0efc0
SHA1

2126efd92f2453c162b4dbfaf225c19f8515b00e
SHA256

17ef292b00ceafa264b877390e375c9adacc5c8a3e150844668ca8f694db4690
SHA512

c16098f42464bffc2e0c958d54a18edd38c4e5fe7cb33df377ce7ea75c930fa09423d97cb2aa66adf0054463a76c739adbdd5458c79f2bd2737bf26269c68cc3
SSDEEP

6144:AV0ca+yqW5tMUgv9/pppppppppppppppppppppppppppppppppwD3d:An7v5vxpppppppppppppppppppppppp2

Score

N/A

Malware Config

Signatures

Files

Pedido PO-40930212.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ