po file 778654390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

po file 778654390.exe
Size

1.8MB
MD5

4ec732f973db5082b1ad262c6a5c2fec
SHA1

7badaaf813643819cd9d1b8036ccf138a3b74a71
SHA256

1a6889803b766ce102a10973126f946e3618a0f80c1cee6d902304d2ffae06c5
SHA512

cd6811ef41f2bb08d841fb7566a4d5b53fda053b49ca38433fb08056ac6e008e10b12ae57b73e0bd1a82bf57eddff1b6278ba9095611379ed8a4643d194fb682
SSDEEP

12288:h6lAgQ7UpYpFz7pUl1xXb4RQju+TtRlMt5DTPaiJ2cH3RnnrgYs3a:jPaiYOBrfGa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
po file 778654390.exe

Files

po file 778654390.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ