POHT320ML-230000026[.]exe | Triage

Sharing

General

Target

POHT320ML-230000026.exe
Size

1012KB
MD5

1e83c4305573d2474cff4b83f5f5566e
SHA1

4ae7e03082ec4660fe2787c0b512d21dc5367998
SHA256

b092e2388c1f790870d97b73440930d4e0c134610c17091e8987622745a0cc48
SHA512

fb470979803e8e9ffbd40dc6564e348719436b7ac6cdd05a1d41bc6e89682c344751f948d9e3d8531e620453a725c9c1694e51bacbfd89f8f549e37ee5f85ac5
SSDEEP

12288:/cgBnwlSWJwXmZbMRaVb1tQUlhJGEy24XrmTVBHZowtet8zzQRDmwsEiHXl6mhuw:di9gRchxl3Z34XrmJGqOFi3MmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POHT320ML-230000026.exe

Files

POHT320ML-230000026.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1009KB - Virtual size: 1009KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ