PO-102022[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-102022.exe
Size

1.0MB
MD5

b86d02677f135e9b1e270eabc6bdd6bb
SHA1

863785b4954597a24a3ecea271f63960fcd8075a
SHA256

d1cda2850fbc6668e1f5787a664e05dae0aae55cbe914c466bb4f4d8b4814730
SHA512

fa9129dc975f021bfd3f0d66e67b06e11950a008e2e7385679f74871677b7aa0fd680d161e37fe0124ad3e9686d510d419a89afe3e2dacf400b2ddc7d1dc107a
SSDEEP

24576:PxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxNuss4g67sgD2:Zg67sgDZ8D/1Yyk/VHYQFdj

Score

N/A

Malware Config

Signatures

Files

PO-102022.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ