New PO_4036041664[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New PO_4036041664.exe
Size

745KB
MD5

8c01c5495ca0e4f5743fd6455830e2a2
SHA1

e5d1ee9aa6e059c7200d55550054c35ba1412cca
SHA256

e99e6625b738c7c270fea262c29bccbd80989649e7b8408036dadce6535f253a
SHA512

5107db88bec8e59053015f0e70f01e4c2bc7c2f22902b4c344a90d0a4ca280a9fa7b426cdb45c077431b8da36e8e5865c823f104702ea2e564622a69dc85f653
SSDEEP

12288:C1vJRBusyyQ/ENGQmlSW4PMdxoSwkSVCjGXPG/sqbqhYeP3yhluuZ:QFuviGQgjgSwkSVCKqqYeP3Vu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New PO_4036041664.exe

Files

New PO_4036041664.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ