POVN00680723JULYScannedex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POVN00680723JULYScannedex.exe
Size

770KB
MD5

617615c0a578a8b541a6cb40a52031b7
SHA1

a405279447c2589b7689051febb2d712d9e40ba4
SHA256

7d41acea98d4d6fcf0f2b213363211dd92645ef2694fdce56e61e81db5b2ba94
SHA512

9c5b80363567aef4d40ad0297ae89ca4d98a8c32dd4bab27a8d868c38d442c3391f9c68e00bcf892d7949dcbbf9c3d36257c9823b777ca83ab3d4bca04226045
SSDEEP

12288:XNzyKerj3hc5Cdc/WgNJY+e6WIqfJ+9KI2iBd:XFyKerj36YK+iW+eKEJCv20d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POVN00680723JULYScannedex.exe

Files

POVN00680723JULYScannedex.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 767KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ