PO-2401822123 & PO-4612829136[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-2401822123 & PO-4612829136.exe
Size

843KB
MD5

981332d11549f1eb263424c170a87ce3
SHA1

22b57a411816b03af7b630bd85c828c7b852afa2
SHA256

6a04362459c48d0ae5eac0209d8faa0962f96f087c86abc5744f56f6fb7aec97
SHA512

1bd5c02bdd6453319d991af9f34748fea948ef3b3a08bc65ca151ec3377e7a1defce21b5a4b2a734e4b756d2dee585064830671afed4e514a5032b71697d33a4
SSDEEP

12288:X2orcIxQi6/I1jZh7zoe5ddORKZqnnH+Z9HEGvJH6REGTZL93n7OPVRSWerc:GEcqEMVojRKZp9HZBH6REWV7OtYDrc

Score

N/A

Malware Config

Signatures

Files

PO-2401822123 & PO-4612829136.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ