PO-2320[.]exe | Triage

Sharing

General

Target

PO-2320.exe
Size

892KB
MD5

45bdd49d71f18e1fbe45a0e4ab3e023d
SHA1

9b614d6d1cdd98ec483014d767a4a15160313437
SHA256

c05fbef6ef68934b1381cf48a956981ea7e1bc4969ca97c8d9851c0309e4538f
SHA512

e336dedccaee99f7267f5b4bc4bb7df8bbf9917726a0ac3dc66e1eb675715868fa9c1b09f1cc9502f89e522594c58a4cc9c9dea9e12a783574320b76bba7bc0f
SSDEEP

24576:OTdCjE5asQ59ZH4iKcxS1IQGMsclrxOc:O5CAIsQ59OMxS1vi8Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-2320.exe

Files

PO-2320.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 889KB - Virtual size: 889KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ