PO 345678[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 345678.exe
Size

655KB
MD5

e226b713f80fdd12e6adf47ef7d32fe6
SHA1

f4ee4d87dceccc95ccb71c2c2c86b3f5147ce22a
SHA256

cb2cbedac34829b45dcc25735d79fb332bed3098741a7ca8a7954de5ceb894ec
SHA512

4b1c44366eb7eb555c0c7b6566db33e20c74ab812bfdfe6b6af3315fdeacf2267272b0ac0c012f24acb3ea29c37cc7cd7cc8545fc0e3219b78fbe6268f13c23e
SSDEEP

12288:MXXYb56I7XBxmMXGUupfgD6ptZECbBQWd6x2h0abPh7D6P:Tt7XuMXGUu5RtJaE6xCPTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 345678.exe

Files

PO 345678.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 647KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ