PO_4500188776[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO_4500188776.7z
Size

508KB
MD5

eed991f429eac15c1a3f3ab4bde49af6
SHA1

a6d3748d91bb2dc338c15550c2e77a1b8e8ee8b5
SHA256

5be3e890694f19ad4c766af8a5474d5c85541d65aa8cff919758953eaf936d81
SHA512

14b8cd146e7bd21f1b3ffc1fdf84745b70abe5481cb13fe901a7a49fd7768ee4286d5eb3783d149a3fd247811224ef92ec62a15c56ae0ff19259d854dc145817
SSDEEP

6144:2Z4cknbXjomALi03r/d6ZMcCPpCs1MAvFxJYc3LTtkDZ16LGxAsA5K0epwwqsaaA:2xIMFP3TdDRCsxVbqnBAs0Orqtvk0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO_4500188776.exe

Files

PO_4500188776.7z
.7z
PO_4500188776.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 923KB - Virtual size: 922KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ