PO_21099[.]EXE[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO_21099.EXE.exe
Size

614KB
MD5

c4203585abc41a4512c542b5361b973f
SHA1

cf069564bb8b3c8f68958aa180cecdf17b78ae69
SHA256

b27bf88f70f1113d1a13e2e004f976b0884c6915cee41bc751d6064cf8350098
SHA512

628800ada58e0f8eb4b2f28c5bbe9ac94bc9ce96dfcf616b51e322cdc159739e8b2aa31ade56ec1ec93d1dfe9807857ca0c25de8b93605c6978ec4fe0d403e7a
SSDEEP

12288:MOCvomAsXi4pn5GBzsvZigvxZi9Dc70tkbm1p04Hn6MrDFvomyfW4lEY+:MOCvomxyqe+IgTCDcPbm1pzn5rDF9ylO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO_21099.EXE.exe

Files

PO_21099.EXE.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ