PO - 140_HEXANE_29KL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO - 140_HEXANE_29KL.exe
Size

792KB
MD5

7a43bb0fb05e75723d918b824303af2c
SHA1

ff4ba50098ee816876e75f62db0f8687cee91a61
SHA256

96df12776607bce40d6ca1c8b9e79ac9b8bc8057ddf91014599e5452896ef4e0
SHA512

c109387719e46f9a6fcf0367b939b61aed6cbe9e8a6aee44b56af9373caeaf5700e296b10d42d69e859fd4f74d16f7a8b932bcd2fa831da40df7a35dc102cc22
SSDEEP

12288:QZnDxtz9SZTVFlAlSCogYMt+2oMHdvZZeUd3RMtVuQ8HPJjQL1Fupggr8:Q/tJSZTVbP2k2RHtZQUET8qRFuKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO - 140_HEXANE_29KL.exe

Files

PO - 140_HEXANE_29KL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ