PS_231[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PS_231.exe
Size

669KB
MD5

922c836b5a2f94d2131e9a628eefb01f
SHA1

78a31b992bf05338c1d9e4475a5b06ee6ae1dbc2
SHA256

4c2d0702d2d40c1da4266fcebbd7eb4b7ad82f896fa6498e435faaf90e677f20
SHA512

fff921958a3aaee3937c500b6cf2aa6d93a06088e59606f7e9aa8de715568a104989f79af08c1074b711c6e4666b0d9598cffead161a9c8b3646090fe072a20d
SSDEEP

12288:eEF+gMBf29yk6dwvqjcEop+AaDq+RkQtOqZIYl:eS+pBu5wwCjZw+fHt/aYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PS_231.exe

Files

PS_231.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ