PO 23000409 update 18[.]8[.]23[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 23000409 update 18.8.23.exe
Size

178KB
MD5

a1662bced65cd0b1a4be962758368cb9
SHA1

94e231c250c84bc79c11d0baef91d4a440b1b5e5
SHA256

be7d2434ae5541a33eda329236dd69fad3756256ba0e6a2a6e6a7658fa58aadd
SHA512

cead34ff0ba55243ef462663ed6c73711e604ac8d987198557af3092db3faf917fc7525746e8bb89391094254bcaaa586afdb3cf3bbcad06b2737682e0ead289
SSDEEP

1536:WAY1c9wqvnAv77vvvvv7vvvvvvv7vvvvv64+mhhhm+DtqOgE:q+9wqY+mhhhmitqOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 23000409 update 18.8.23.exe

Files

PO 23000409 update 18.8.23.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

2^)V
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ