PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.exe
Size

1.2MB
MD5

0b75a5f52fc5202479d598c49e264648
SHA1

31281d09d76126687536b36124f81fef8544e803
SHA256

7311d2db790d34c3bea94e360cb7031a8af166348a6fd0127d9ce9b6e4236f4d
SHA512

a6adfbbf2989acdb92f72e2402ead7657721714d531fdcea2a3059f6051e85e4daa70bd4205963b04ddf3d98d8dacb6ecd3bb5b3f7adbe2bd14c58230acbe4c1
SSDEEP

24576:uUq/u+sR1tmXmj2Xy2s1WUbhWq4B4Wo5xhF3yd2OluON4fA9uC:A8aqayX1Hh02WoP3yd2OluON4fA9u

Score

N/A

Malware Config

Signatures

Files

PO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ