PO ETYFG54H[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO ETYFG54H.exe.bin
Size

647KB
MD5

722688b0c3707dd1e0c3fb5ca42bf2de
SHA1

515a191d3154efa4920c33a1609819cb39bfbef7
SHA256

f3930872b28e5b08c22af5b2714e5295d2fd7a2573b9e01444dbf93dfc723420
SHA512

98f0a53376e77ca2092a9627f780e84b117b13e3d7e76fd1b8edd6f76ceafeb63f09b19008c48a6581338bc72699806a4c73c85dcce084e986929a64097f01a1
SSDEEP

6144:BCl4ErDp2YhX02OkF5efVEVV9WcPVorxZfl+b1RalyX+ikJMYAlafaBxPd8R2rO5:ByShcfa8KMWYPrODodMMi6Bine2ahG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO ETYFG54H.exe.bin

Files

PO ETYFG54H.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ