PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.exe
Size

978KB
MD5

400846e93659cc04be844bbbf633ff88
SHA1

bd312983e7c9b84c19c91527b995038bd7a141b8
SHA256

41257d69d874dcd96d201266b86bed56782de2c7cc00e960b3e3e6a57f5ec7dc
SHA512

50fcbe403756f7206c030c72d2626becd42f4d90cd1afe0ec9afbdbee116e366646a7762771bdcd86fae07a80489b37a22c6e9537f2e09668d9323c915eca652
SSDEEP

24576:Vgsdfzm4KP1zGObmuSXlui0ZTiwAAgEEY4:Kst9KPJbmuy0ZTQp

Score

N/A

Malware Config

Signatures

Files

PO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 976KB - Virtual size: 975KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ