PO 5500427059[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 5500427059.exe
Size

621KB
MD5

5a8861a3ebfd55d681d61f0afa70257c
SHA1

7bd5bc4b40d2621b3f2517aa589c4d68c6505723
SHA256

363c1f120597ff012268e72d8ce57242c7bece16098cc97db69d8124038cd41f
SHA512

9e092f745528c7167794166743021a8577371c73fd9b443a312be894d53c31db8d2efdf3a645ee8a5d068c4d2b4bde4d0d6362ac8cdb8d6b1205e134cb1a9adb
SSDEEP

12288:lytsJ8EzTvCesk0wi+duoz69n3PW351y8J8bXTFGJyzAVUQbqeMc:Dqeh05+IozCn3PWp88absysVUQbqeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 5500427059.exe

Files

PO 5500427059.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ