PO STS5492(338)042023_PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO STS5492(338)042023_PDF.exe
Size

588KB
MD5

696616eff09c1062e6ca4873e046bb9a
SHA1

687a3ffa0c8ee556eb905757f237efbbe0662374
SHA256

21267f1c9f80d23b5c5199bddeec69bfc45b04de306bf05939622c5c4ca8887a
SHA512

fac45394008d9a45a5d0dd65d0a88b818834a14e4cbcc88df3435ab048a601a4143c19b6003c921144eb1341d90feb2a9e8f2ba5b28cbb08c13435773d460e40
SSDEEP

12288:0OnbqjcstowkEHUIZtbNrTwvd+XloAxCIViOfHQqzhSIXUZ/1PJUJ:0J1topE00txrTwVGTx/ViVE4ZzUJ

Score

1^/10

Malware Config

Signatures

Files

PO STS5492(338)042023_PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ