PO-231062[.]exe | Triage

Sharing

General

Target

PO-231062.exe
Size

321KB
MD5

607c49b93becf8d80b40e2ffd14226dc
SHA1

678758d0b4ecba81e52898048ea34bc68e429d7f
SHA256

584b5dc91f89ccff8b188c3b3c4595df811d3ee4916305dcbe9f392a03ec75f0
SHA512

11da94ac67cc730995ea083398e0c39aae5ed360589693f79e4e34c44f498532b35d44b9452d8dfdb5cee244b08b18ed2bf64b38a42b3d5e6c10d8b8e175cf0b
SSDEEP

6144:Vgb74quFxbIBMPryJc3Nz7jCbT3Cdeh2kPYjj17R2NZ:VgibNyq3NzXCvCdMCdQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-231062.exe

Files

PO-231062.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ