Erp7[.]Pos7_O2O[.]exe | Triage

Sharing

General

Target

Erp7.Pos7_O2O.exe
Size

7KB
MD5

a66bf34b89d11aacd1b43353a0056ac5
SHA1

4fb4bec2b43a7e439303a74c737284473a6a6961
SHA256

6fea60128fcabf0400087b0b4e31a1059f2808c4615c5f3f2c949d6170005559
SHA512

2f1295368770fccbd889f27dd22a75aaac7bc8e2cca90bce7c18cb790934eed290cb88de3c2e2bc06d53951ce398093c0f9c87da4f7aa8b2528fd5a4aa415c32
SSDEEP

96:meqLQH92Hup9hOe4VhSILFjW0so1olrcm48wzNt:YdGDO/cILFjW0so2lIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp7.Pos7_O2O.exe

Files

Erp7.Pos7_O2O.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ