PO-1243[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-1243.zip
Size

516KB
MD5

b11b8e92a5aba67368c147edc5237eb9
SHA1

1a7aafe1859a5d0e46258e4adcfff756680ccba4
SHA256

92fe21c045da737ae2fea7e5a593ceb5f9a0eba4bb27015b716767bcbd7fa105
SHA512

05c0b6ddb0e38cd39a1b2d24089b02aa810e50297ebed57e38f4c6a237900eb1b26ff7bf54820ef0b783b40c2c976cfef436569df733e9f4421df896f0a303ef
SSDEEP

12288:NzrXq2DMeSIEaKgmvO4Oy5YDKGK5zyX2ze3i0cTg/hsq:NrXq2DUIEXg94Oyy6xTe3rkehp

Score

N/A

Malware Config

Signatures

Files

PO-1243.zip
.zip
PO-1243.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ