Urgent PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Urgent PO.exe
Size

816KB
MD5

8703f9a4c679ff850425350e33cf334f
SHA1

3bee76c8cee10f97a5061d69b8e8f18e670e3c01
SHA256

65cea55d24d19444f39704ab0836a07e7e89a99b244abfad347516b14f58af0b
SHA512

abd13e6f04ec7adcf9fde4c0351bc8b16a4d1dc99c10c02b360aa16aff2df76be2695745c7d5db6a9964b2439885bda5782f490d7face804f28a46a1b8111821
SSDEEP

24576:kMkaSHlWxMiQW/O4ue7llpx/8mArPQUpYPuof+:69lYMiQWmS7zr//ArPnpuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Urgent PO.exe

Files

Urgent PO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ