PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.exe
Size

2.7MB
MD5

935612c4ab431449cfa4e00c859a2239
SHA1

e7283d1b61fb1cbbabacffc830da37b0019c8f1d
SHA256

5a048522eaf3fb8829d669ee619741ab4117b74e832c9b7769018a71b2e96b7b
SHA512

16940a417d61c5fc5249d0e8b49daac5b03635bff345215247cfd00893a8a3fa86d5816f0ed1a80aaad9448e3fc48ee2909fc58d99af3e9e266e65589782bb71
SSDEEP

24576:rMljrCC3mre74c5Aj07BQuuh/O9TtWzkse4Ktu1Dze6HDpLRAQ7sXl1m7XQ6P2yf:A0g4zgWUaQx5/UtXZl5RzU

Score

1^/10

Malware Config

Signatures

Files

PO.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ