PO 46RUD442IO[.]exe | Triage

Sharing

General

Target

PO 46RUD442IO.exe
Size

675KB
MD5

0044ceee20a10d6f3f8c858af724d8d9
SHA1

0f7d205083704180ee136edb5324d7b9d504642a
SHA256

f4f769c0da3532e0c4ac83766840e586330453f9754a109838a9aea51cf793c7
SHA512

17992f541bcca10b4c447e92648fb1e44691ac44f1ea852109ebf8ff3d44a4b730c3ed0d785525a664950fd6f94f8a8a1ec2680c63f2b9b243df01b8317a9a4b
SSDEEP

12288:ItnnXFNX/W6S7SrGq+zf2yO6/LVo4D8VtSvHp4+Ea8AWDONuD:gXFNDdrGqQXJ/LiY8VtSvHmoWyG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 46RUD442IO.exe

Files

PO 46RUD442IO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 663KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ