P O[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

P O.exe
Size

1.1MB
MD5

52d6a9d324f44e73e3a703d6d88f5684
SHA1

b4a9f97b2fefcf73985564cf8e2e4511d289e313
SHA256

835f096f42c427528bf7c39534478a712c81aa454db9f6372b42da155f6ea56d
SHA512

795888f628a955e572e441f3991c786a385c05485e9431fa2901bec08f0f9a856de1601f9a710971d1462032d95a17b10ff3e322afa04686932d2ad9aecedcf0
SSDEEP

12288:umetLMq8IPAc1i0vvBXQo9G46Se+QI1daIhzSnhmVF2AiydioofycyCLD4ufSsZ9:aIcdXpQrQe+Dd5+85dnoSCflKP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
P O.exe

Files

P O.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ