ENERCOV PO-230102[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ENERCOV PO-230102.exe
Size

699KB
MD5

a695eee494d656e9490d7630f3c5fb32
SHA1

072e838f90e184ccecc34b4eb78dd0a432765bb7
SHA256

84652d3181fc4dfad881b733e96b9181c2aa8bf5d3257781228613419f7583a2
SHA512

e1ace1cfc4cab73720cdc0dc21d10b9f735811c39ef8898aa325c5cd8365b2c9f721401521aac66fd414b47d95f0572a86de7c0393375cef9ae1e4a285aec805
SSDEEP

12288:CUy8Tlmjc5dv1e20zfeVw0ggSFZKVJ6f+l8j349FaYzuW7o:HyW8c5W2RVw0ggs8wGl8j3sFaYJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ENERCOV PO-230102.exe

Files

ENERCOV PO-230102.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 697KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ