PO-1193353[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-1193353.zip
Size

507KB
MD5

75fbc939b7644359a5ad9acaa578c222
SHA1

dadd79230008669925be29bb8d1a18eee443863a
SHA256

312deb37d14c63aefe2884680c218432aefc510a565aa68ed584d35c839ce694
SHA512

9cfa7b6bb5aaa6f6c9da0d49bedf51d9187ca68f132d8871f0f7293446be29bbca0bc961dcf8972c0cae87434e9df21d543cd2a558699e7a7ca8905f3408c04a
SSDEEP

12288:tcU2gxvS2P3i3ua/Hjd+775PtoNAOnKM0YrA5Cv8vn9:tcUXZS2PGboHfoNADYVvg9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO-1193353.exe

Files

PO-1193353.zip
.zip
PO-1193353.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ