POS_C090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POS_C090.exe
Size

2.0MB
MD5

e3383b67bef15774b9d6a944fd7c849f
SHA1

10997e25bc0cfb4b3275ce6d743350a782f1830f
SHA256

f60ebd404ff2d8e00ee0774af8e9705143e96f0fcbf5a08959e8296f12d2c7c6
SHA512

55d6d56f91bd7e2964fa707436369754b731fbaca33ee6a58370d88526a135c7637ed026b289294562914a6d2c8977b2f0152b2e1f41c3047f45fb6d1af842a2
SSDEEP

24576:NgJhfLJwN9JiP9bqtR1C3PZylDCXAsHD9UAQri3bTc9ZjvVJKSFuhpQwJDKsEAsq:NgzGxSMcUjiJD8XxpXSVtZe4TI+gkPD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POS_C090.exe

Files

POS_C090.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ