PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.exe
Size

629KB
MD5

1293cb2c08e02299faf2c172941bf0df
SHA1

64c966f85762edff54759b7a237f4640e68edf2b
SHA256

ffb64f4d42dd2de275cbf4ae7b334ffdd8920ff8fec95aca9900493472603d16
SHA512

69dd1a620523b9d1b49ab8c6b99f8cacacca303d04c269649a77b3be8b2384f71dd21c2c0efb8feca44012fb410b36de910ea7976096d5044cfba7f5b5094f26
SSDEEP

12288:lm8+Pg3m+8ubkwvdUphZJNVJKmcna8p/pxBriWoLrlv/b:lm8+PB+bkwvErLxcnBxsLxX

Score

N/A

Malware Config

Signatures

Files

PO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ