MitsubishiPO22023Colombo0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MitsubishiPO22023Colombo0.exe
Size

1.9MB
MD5

7854a88a1630d94b983d3502ac92e549
SHA1

2dac6c07cbb1c0dba501acee0d37cca0586e5731
SHA256

871176ecc1d646e9203cffe411e7b1980207d8080a85549a2d429a18fe90d6e5
SHA512

4adf1c299fd542c0f61ea2c47d6b92e938009dc5bc4dd6a868e06089555c91f97804c26f72cb0ae453fea89bfec670ddd3b9779a7b20f14959388812c5378644
SSDEEP

24576:z4/xaaJcAMv0KGx3AJLB4TyEPjGxMva/I0h:UAJRBwPjGxMva/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MitsubishiPO22023Colombo0.exe

Files

MitsubishiPO22023Colombo0.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ