PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.exe
Size

794KB
MD5

0d5c1fd361c950b76c7e4954f253d119
SHA1

6e663102873664b3e39a77f3a10a9ee77d4b642c
SHA256

c2a660f241bb21cd2250f452a8348406d38b8892531fbcebf59363be419fc1d0
SHA512

ad6e86f77b2682bc4e3c69f6e58476622b310c3f6ae4107d757eb1ec818a5ee1fd32308bd97ce92b6088099e88c3add961205b6f38e9eb47f3695f6ba431d086
SSDEEP

24576:8uUjseHKNTn7tunA+/kSOYMfmBm8yhBG531paMD98et:8u3OoGp1k098

Score

N/A

Malware Config

Signatures

Files

PO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 792KB - Virtual size: 791KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ