Attached PO[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Attached PO.rar
Size

647KB
MD5

4c0aa5cc9694551c9770ea0df67e2769
SHA1

748c4bced987a2bbd87fa4693f4326658108e6df
SHA256

fe3cb840122a59234336d168b149cf72c1c2740869bd64a5def2a8329e0ccebb
SHA512

cf30880704aed97763ea1eb893fb645bb20dce4d321d7923ece9c1710060c4c3415bad5ee361e975478f6f7715593a721bf0bd7ad72839c5cbc8fff6cc8b85d3
SSDEEP

12288:+6cnUfPD5LGvHhw4ai2VZ+4bm3OY8f8ruQWUMKtb09HVpM/3K:+DUflWh0VZ+l3OFQNze9HV2/3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/uUlJW7EMNeoqXj1.exe

Files

Attached PO.rar
.rar
uUlJW7EMNeoqXj1.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 792KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ