cfed3d94afe2a132857cc48a8e6eed3842ba6a3e8b4d80e18e72d706a7a750d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfed3d94afe2a132857cc48a8e6eed3842ba6a3e8b4d80e18e72d706a7a750d4
Size

466KB
MD5

a951d3597e0389ef0cecb522dbe194e4
SHA1

27c492eb1e124cdecd5468a8350e7e16fdbb36f9
SHA256

cfed3d94afe2a132857cc48a8e6eed3842ba6a3e8b4d80e18e72d706a7a750d4
SHA512

b8481750392c4536445f75374bcb69dbf2dd35a694fc98deaf4052365d9866f25310ebfca14de0fa02fed95046bb1e3f5400afdcafc16796333a950a45c9313e
SSDEEP

12288:1pE3q3MdcEnjMSXndDwpA4dLIwOwfPwbYmWxuwl:h3ORjMc0m4RIwO/sLRl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/PO12177.exe

Files

cfed3d94afe2a132857cc48a8e6eed3842ba6a3e8b4d80e18e72d706a7a750d4
.zip
PO.IMG
.iso
PO12177.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 486KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ