PO 4555131028[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 4555131028.exe
Size

797KB
MD5

da72822ae3407dbcbf047b643106affb
SHA1

72ed4f4b41a1f364c44108b758cb5c552932dbc6
SHA256

31fd23039c3d2cd75d9b8a4e51a267f7c7d678dd996d67506adb1cbfe0602c5b
SHA512

8fd18258e5ea5c5033e72677f806c2d2d3b7165fc6ec172a1e1d9818829902a2d60d3e57122e98d844239f0e3ba6e9a9a5e42732617823969d557edb50cd043d
SSDEEP

12288:lLKAbiTB2QwGvf6U9h87hvExVB12t2yCiEehYFet0MMjWgfIZmw8dH6m:RKAYrZv87m64yC3ehYhMMzfkmw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 4555131028.exe

Files

PO 4555131028.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 795KB - Virtual size: 794KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ