POS_C065[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POS_C065.exe
Size

2.7MB
MD5

341f89d279ebbb59ea2e8422bc6fe4c1
SHA1

c38bb3df21d5e7d88272a32f6591b1b6102d2300
SHA256

f1ef2b1bd3d6e92938710de5e31ff8a852972b84e68458f602fb192ada4cfb79
SHA512

71386931edc6be25e492d207ce68a597bd8a56cbd745bb0effb628573ecf99ec95235ba12d13e470302f24637343cead5a093824919753aacfc88ddbf083bee3
SSDEEP

49152:2YMl0ut3akDcbOBS9T090PDNAFjjdjjA/YiY0Y0Y0Y0YI:25+BkDcbEiQgNAFjjdjjA/YiY0Y0Y0YO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POS_C065.exe

Files

POS_C065.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ