PO 2600002488[.]IMG | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 2600002488.IMG
Size

1.2MB
MD5

b4fe25e92091ef7840799dd4ed28dfac
SHA1

f5360859628ecd0ef456fb88d2f75be7e5a2c709
SHA256

3d740a3e2a7d70f673a30d4d18ab4d06ec39294498c9d445e46f98089398b9bb
SHA512

c7883e15004bfb1f4bef6d68ceef9f30fe8a9b56398f32c4c576bd364fd68ff96f309eaa37ee99a5fd1c4879906124893eaf71d38fab0b9b6d4ee063c6daf74a
SSDEEP

12288:W2N8jiZ4zypIPsItPplTY6RhKuV/m2XOCVmUg5OoqjezjyLJsapm:W2N8jiZ4zypIPsIJTDEg/IfOopzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO_26000.EXE

Files

PO 2600002488.IMG
.iso
PO_26000.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ