PO 91402278[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 91402278.exe
Size

864KB
MD5

0e286cccd5c5f72c027059d73e382118
SHA1

616e73c4e3c4fdc5ee73325fc44f03edaa88c485
SHA256

73bb3aadb9432efe0971a8211681ed2df1d891997fbcd1add6f4960eb05cda43
SHA512

b20276a18beb3b3148f51615e1ff0128347f1ee2ee603d203095d16bd6e1f5e9406ec3e74e796944939915b8a0bc9f0e1a9c3d9d9d2f4433b49d0823ebabe773
SSDEEP

12288:ib3nsa9x1LsqbsgGweGgpC8WCFR9rutHsxd4zI9hwuvJjMV4Ezj504Oq:zgGwcxW6uMxd4EzvCVXzj5G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 91402278.exe

Files

PO 91402278.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 862KB - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ