PO-00112023062700[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-00112023062700.exe
Size

858KB
MD5

ced56696dac5b6517c34bd554ae2990a
SHA1

2d931e1ac26fa4b11bdcfaa574b0cb3ee27cab92
SHA256

d22d6e60b9dbcdd803d619a6385de359f83f1140c0c69afccc89e0b122ec60ad
SHA512

6380a6d720220efb2e089343047616da5407691e8aaee1ce71a6078201f31a63aa37738081ba5b2a9b282b37963c0eb439f5688b67dbb40d5f3773580bf97dea
SSDEEP

12288:J2iNsXDl+CtVUCra1SjrT3y1h96XigUMdj1KJG5:J1grrMSjrby6ysKJG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-00112023062700.exe

Files

PO-00112023062700.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ