PO23-00016[.]exe | Triage

Sharing

General

Target

PO23-00016.exe
Size

600KB
MD5

28480c8df9ed6744fde8cdc7baa68915
SHA1

6f7cc268816d029cd36f8672c7fc1521b0c09018
SHA256

32ab70a0b9837a3a959859ae34b2b8d5c195298fce995370f8df8ce0094279d1
SHA512

23c766804bcf8b8a57ada1293188bc704ad386bd889124ee0ab16b8c1e82b0bf55b3d340357d24b95ec70c9dd4733f283a445480f2f293952e3cfd847acbfd17
SSDEEP

12288:d725mCf4nvTZm1FGbpUqC6KAAk6aM7kWnghAoOdgMRH8lUTTCB7BE:kcr9m1Fkpm4WnlompHi7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO23-00016.exe

Files

PO23-00016.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 591KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ