New PO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New PO.exe
Size

645KB
MD5

e02baf1162ff917a6fc22b52cae224d6
SHA1

1e3938b6166a73f22c8db7ad8ec484be312e3db0
SHA256

5c052358e586f6c13f6b87a424648e4a36629f3998cb90baf6372e1ce37b6920
SHA512

e068743362e959f2d079bd0a8233650047b12451c7d7e8e4eb45072dd224abef522124d85209c9004f6b0420f951b64d06ce96b7b48f664bd5354afddb9fa056
SSDEEP

12288:+2iNMyiRJU/WcG6/vNzqsiXUhZeZ0/PKub1TVC2+qhaR5kMXE0P02UNOMPgxEfb3:+1FFecdfsUh42Hb1p3+qEW+0vNOMYxEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New PO.exe

Files

New PO.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 642KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ