NEW PO - 4610926543[.]exe | Triage

Sharing

General

Target

NEW PO - 4610926543.exe
Size

785KB
MD5

440cd930743d1b0c91c6d7396eaf23e0
SHA1

f2cbcde2047dbba83c4ba61543c1a10e4286cafc
SHA256

65370cfa1e08f458d53cb661cf02054d9324f155a7bbf6505b4da5c2f9492385
SHA512

997d4f9e3649d6daff61b54da347e4c79e61ecc8000ce57219800db7222c7dbded6ee2a59e93f71fd1650cf1fa7ca594cb22cdb9a04ac3f6a8e21b211ee48148
SSDEEP

24576:50biRoSErVxIE5+wqAWxE3YSKeE6xna9I6vfY:5y4oRrjIw3qjnReP+vfY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEW PO - 4610926543.exe

Files

NEW PO - 4610926543.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 770KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ