ANST PO Confirmation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ANST PO Confirmation.exe
Size

959KB
MD5

8db427bac6adab4878d1f25f19d379bc
SHA1

bc2c9f1bac5377bf53d9eeb58a121756490b24b5
SHA256

7eaae233b18c778b06506f210e3c6f3076bcd1957930b3ced131749683d05703
SHA512

6db4da2668e444724d01e750bf31ee4ee4f219b88759d842903191e172858eb9fe3de95fae9ff29195fde4350eccbbad07a8b4f628752b9a9cf0d350a82c7f26
SSDEEP

24576:qPOeILgI6JH4XvRoHAZUjY/j3WmH1x+UWoDU1Om6BhXPCN2s0O8BD48rWHFDW+1g:qPOeILgryvRokCwGi5WoQM9PCNL0O8BX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ANST PO Confirmation.exe

Files

ANST PO Confirmation.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 724KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ