PO-MW-17-02-002S[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-MW-17-02-002S.exe
Size

6KB
MD5

254316d3ec7915ea07abeb03d5bf1101
SHA1

a46b8f566e72269a0390f815155097daea5af69f
SHA256

dddce3d4fadf7f5d48fa019acc831cc31a2d32924b13be2f94d5eb9a118d14d4
SHA512

2a203a55d10efbd51bfb3a330141c0f418ac3b1968af52613241b775172fb5ec749e25991978ab97c6be02a9c8b7f7d6bf754269a3d338f008ab6260e2cfbd9a
SSDEEP

48:6sk8Pox9oSVnyvO/qp9Gn+ZLzELd9pfP30yNIOemsdqBHuq8CNPy7DhpsVtiOl8C:vozRn7CEnC+/pfP0mGkxPGDYsBFnU

Score

1^/10

Malware Config

Signatures

Files

PO-MW-17-02-002S.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ