PO 210993484882[.]IMG | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 210993484882.IMG
Size

1.2MB
MD5

2cf04556b328c8d1c37d8c10da0919fa
SHA1

97ded19649f54f8f24c32ed5ba1b692279a20529
SHA256

7b0b61c1d70509e64d368db1ad60e185781cda049714ebefcee2400ee46d9a58
SHA512

a380e8b565571e83a0abd8ab654acf04f1570ff53e2dd907154abaa1c1d21ccc072009b98de5a96e9699068e60edd6f5dbb023abc23fed53186334f5d96fb4d9
SSDEEP

24576:oOCvomxyqe+IgTCDcPbm1pzn5rDF9ylO:RXQXdKcPbWb5rDFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO_21099.EXE

Files

PO 210993484882.IMG
.iso
PO_21099.EXE
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ