PO 2300982[.]exe | Triage

Sharing

General

Target

PO 2300982.exe
Size

603KB
MD5

5f4cc48f54076151ba2d2cd30d0f53f9
SHA1

5bed0e55f1982b472a57d082b3e3227ef30086ac
SHA256

880b355f4d076ee0088a17ca0b32c4b3771aae3587c49c60d853c31f129b18ed
SHA512

59346b7db46953637e7633f82951d6b18d8dd25e1d160f14c6661fd1a441a5e635144567a77f127adb7890495bc1b7d54caa604e3f324cd8a92d6fe7e7080136
SSDEEP

12288:iIkX6hQ/tYQpRIlSlvHuTk1kAB/bsqgt/KY++aFVCqnQr73ZBk2Uph/9:iIkX6hYiQfIlSl33/wr/V++4Vc7s2gh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 2300982.exe

Files

PO 2300982.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 592KB - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ