PO H0001[.]zip | Triage

Sharing

General

Target

PO H0001.zip
Size

500KB
MD5

b31ca7e113351804e0b55cd6f4a3beb7
SHA1

c0ffe81d8a8b90768822f8a5c63191ebab8f97da
SHA256

f4138806e15a620850c49a3ba7f5b558071f17f31df4fbc2b861499df6475d4b
SHA512

9aca4b18850381774e9e2e717d9ac16645b8f8b0a61fc7a101f96e1d1659015add8274a0b7c2ee13542a975b4d6278c5807a9e3e6e4ba35f02a8d2117248f3d7
SSDEEP

12288:7WbOqgaBBCy+EcceJZw7OGg2iaHHGmZPC2JmqlF2+N18Mb3LI9qEIFPe:CbOqg++DJCaGcmZaFCFNN18M3mB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO H0001.exe

Files

PO H0001.zip
.zip
PO H0001.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ