PO2304001pif[.]pif | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO2304001pif.pif
Size

1.6MB
MD5

0ad874f44f05f8c656852e0af60b73ed
SHA1

31f2bd4633d384612cad897719a870c961c5c569
SHA256

ad83447b6d362f0bae733ae90166306dcc9acb8e379f3285014b78edbe9fe916
SHA512

35fdff1e67ebad651fbc9731b0f5e037e0fed85d9c41f7891f28298c38380e63922c18665a9b9ca67fd52a15e17f848431aabf50b1c84adfa20c03246661a997
SSDEEP

24576:0GL9vx+n/tkx0dPvObVfi1rXoPldNvqkZrYgyvha:3Tx0dnX1rXY3NH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO2304001pif.pif

Files

PO2304001pif.pif
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ