PO 4501030779[.]exe | Triage

Sharing

General

Target

PO 4501030779.exe
Size

680KB
MD5

d210677a223f27972b55661b109c10b0
SHA1

c2e07a334e61e6aaed7b06e90e03d28f50399fe2
SHA256

29e92566e2158cc45c25be94067d2a604a9abc06cdf7a35eee378b689ce91952
SHA512

28416a82579d75a68e2c2ceca8faf9948c4228053d22b097656b78a14fdd0df4b4b7fc81cddf0ee0cf4b0f49e991457489cbebf51c46c298dbeb41d613ed308b
SSDEEP

12288:C74PbfJZPfien0IFSpOhep2PHk0jcLR8FJD0czHyAstISnFRiugsOSoXL2k:3fv2pOhPDjcd8FJ4czHyAWISfiugsOSk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 4501030779.exe

Files

PO 4501030779.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ