POS_C001[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POS_C001.exe
Size

4.2MB
MD5

45ea85e5810b89e993f7be8deed24efb
SHA1

6354e4c89b73292c1863887257d236e18fdf4044
SHA256

4994023dd2c316bd17b8664644fa804bf622569e621d97f9f4bfcf5a3271cf2d
SHA512

67b44b191878fc6e72d9f655794f1516a151faf5dcba8568e5da530253c4beffbae3ec3261f6e20d560e5f46826b519702cef418976d4969d5f23b93133e7237
SSDEEP

98304:3pRWcZoHBw8lN3Zvj7tGYxc/OobNsNL1yAFjjdjjA/YiY0Y0Y0Y0YI:nzihJZvj7tGYxc/OobNsNL1yAFjjdjj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POS_C001.exe

Files

POS_C001.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ