PO#88224[.]zip | Triage

Sharing

General

Target

PO#88224.zip
Size

455KB
MD5

a14bcfb6af44127eef2500c075bb7ada
SHA1

8112320003f472fa76e3f0f5cb3cdaa142f901dc
SHA256

5e7563f28d1b5ecfcabbfb651823564dbeee5986ec0ad608b446b01c0e74d9fe
SHA512

52046f5e8f73cb8fab7bf4ce56be86e56d0a5c01269c86b374a74ca76e91f7f58fe2e0f106bafe5033d9b9cec5aff4b382fb4de9f6822d117ee1c62a3331a1ed
SSDEEP

12288:0gcLr2S5jSx0T4xxUVJDYAwBu2NaV2XQFVvohX2ZY:0gcLrR60TNHDYAwBu2NaYgbPZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO#88224.exe

Files

PO#88224.zip
.zip
PO#88224.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ