PO#TY20230428015[.]zip | Triage

Sharing

General

Target

PO#TY20230428015.zip
Size

513KB
MD5

8621f961f2a8cd9b9fd0a170134f451b
SHA1

f700024251f4176ac92a4c863ddfd3514b8dbebf
SHA256

0ad61076e9d17ac248b46062ee4b5db075b98b12c6100bd06dfc3d27756c38f5
SHA512

762d71ef8fcf4e50d9813d62a4fbfb7f2a8a891beb1c90f0029c2485ae1c34908c738c5fc2baa75851ebe8c891b3192bd8c950d8dd6402b27fce42d0fbdaea31
SSDEEP

12288:A6FEoH2IzNojASOjOW1muvQfE17jOw1/eMQ1S:A6zHpzCjW1QfERjO9z8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO#TY20230428015.exe

Files

PO#TY20230428015.zip
.zip
PO#TY20230428015.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ