POS_C040[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POS_C040.exe
Size

2.2MB
MD5

4b817609b7ca0bc32246391dfb5b05ca
SHA1

6ba0121c2a8622295f453979cc16f6cbb0be4d26
SHA256

6fe62981c39d135b4f89487eb2f5612b9d681d2a9b43c6d2d83cfd631ebc24fa
SHA512

021f8a12da515045cffcba26249a20621783aacd82bad4a36e2bca3b27a35cdf2ddb123e0c5bee278a871737cbb82d9d109df1f90225cec28697bcf1b35dd7d5
SSDEEP

24576:9kEZ5cYvyNBMIaTGHZ2UEWFGc6mJb62EvOKYF3svXY1Qms5oEkkd4PD:9kJzCC6PvO3WX5oEAPD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POS_C040.exe

Files

POS_C040.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ