PO[.][.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO..exe
Size

876KB
MD5

897c78d5b9c1bf368fbfbb4f33c9caaf
SHA1

3e24e1c61d6a3cd237af4080ab5592a178cb5373
SHA256

c804d3785acf26364471c13ee7b8714bce6329666877dff5541252ae0613af55
SHA512

2b31fbdc09bcfa49f95805c7d76d0d3f80aa5ff03eb7ee756abda80e8d85a93f8ddd91f883df1dbf93c26a45c57fe954ebe8ef5b24edecae67af958e7d0541b1
SSDEEP

24576:HKtA9V2+7m7Xuhux7ec37unKoihobbJnnLqS:HKtA9V2qmau6yeKFobb4S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO..exe

Files

PO..exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 873KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ