Po- Order 98540-00[.][.]exe | Triage

Sharing

General

Target

Po- Order 98540-00..exe
Size

736KB
MD5

2cf92861a9c618b09f22953f6edb73ef
SHA1

3086128a86938e89cbb58ebe364229ef7eb7f5b0
SHA256

c603271f1321b7edd2268827c0188b79dfb7847e85b128e47d7101602664ed4b
SHA512

462b056d7722d891d1c82a3840fe4e36d2261bec1dbd93a9d21b50866988d55c1fb0fcb342573e4281e4ee1f1081408f44a86e2d23b51064c823607e187e75cc
SSDEEP

12288:HLHqc3+GSueH5qvF8VUR5QghHs3I5ZR2eEkWooDNvUAu6p2sQJUGg7ombj/+9g5o:D/uGGqvLDvfDdWooDNHXWQsgFod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Po- Order 98540-00..exe

Files

Po- Order 98540-00..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 734KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ