PO$69,560[.]65[.]ISO | Triage

Resubmissions

15/08/2023, 22:53

230815-2t2bnafg41 3

15/08/2023, 22:46

230815-2p6etadg82 3

Sharing

Copy URL Twitter E-mail

General

Target

PO$69,560.65.ISO
Size

1.2MB
MD5

684e0b808dcb87b29b4368af2cd4ec3d
SHA1

91b31251cfe546d8b649fc0b0c1bd9a66a1a0962
SHA256

771e6b1faba7c3ebe53f90544124fc16bb91086775e5569c6699be1de64da2da
SHA512

6d8e32c15f7a54f76e16ad105ac67bc20ce79683a74a7d46436c85da1c48087f1b05b43032b6b9a3ed6f9ade973e00e483c57ff843d62ce9179ecf7ced9ceca4
SSDEEP

192:aiS040smhcz2jjYSL1pHw+EjknoYHYBJ73PkJsNVd9rLzXM5:BZsccz2jj7LTw9jQwJ7PrXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BHH876.EXE

Files

PO$69,560.65.ISO
.iso
BHH876.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

J~|gQ
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ