PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.exe
Size

18KB
MD5

3843ec0f49b14360ad19dcb663786989
SHA1

9514931f100ee4d86e2f8df0afb4f009b1ea18c9
SHA256

2c644e2156f1e9776434b10b8e79196e6c18c365c9f897373a8d9b60edba2dd5
SHA512

0b0a82be86bbcb6e83b6eb5a2a9c02cc5258ab39a02350e55e3980102d04c567567fbbd55437c79eb58daa40f1c6e147c60d2c2cbd174768d82cef7c7a31572e
SSDEEP

384:z2YZbdBZ4g1dXhj3pttS3loHok0NGHISSNKnTQL3:aW44dF3YzpGBc7

Score

N/A

Malware Config

Signatures

Files

PO.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ