PO #NO5262A[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO #NO5262A.exe
Size

1.1MB
MD5

c9cae8e226290ccc1328fc8350b71b12
SHA1

eaf1a02732dc7ae703d7791493e87ddd7e18c951
SHA256

4a6fea578e986a61424e227dec6a18e93d45f5577bbab73e0178a95a5faee39a
SHA512

df4c2429042a0d968cf40646f34fa77af3964bf26a5e3e4873bb6b824cac5d998774873551075ca658b35dd8d4bbf0b43a16fe9cfd7269cb9496aa6cf4ad97da
SSDEEP

12288:xU9TRsANxDiPickb0YJ10//Or/5nF9jt0Bg7jsLOM1IRywStDZRA3+B9dkchjuha:xUhRD2Pilr10QBFf0eFuPD+4mLln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO #NO5262A.exe

Files

PO #NO5262A.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ