M231747-1793247750-PO-K04[.]exe | Triage

Sharing

General

Target

M231747-1793247750-PO-K04.exe
Size

1.2MB
MD5

ca654d2e18e712e8208131d398cf577e
SHA1

745220418b2c4be9e1cd5b6fd87176aeaf24e92b
SHA256

d228edad00c7342f36732017beec3c7ea9057b6ff8c527198ab29d9eefcee645
SHA512

a1f04b5d344d5af859b5c0b2202479d913ec52008c2797abcfd390230c93756a65a01aebae33888e251b300f7bc98b5faff5c1f29752d07fdf27e638780bd228
SSDEEP

24576:mCCa6JHRST4mTB3YL1JirG4bxrhnt7E+jeUZGrUmx7LYf7t:mNRRzmTB3+JIbxrht7E+jnGrh745

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
M231747-1793247750-PO-K04.exe

Files

M231747-1793247750-PO-K04.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1008KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ