PO# 231001759[.]exe | Triage

Sharing

General

Target

PO# 231001759.exe
Size

741KB
MD5

6316376eab7bb0b2be03cb16f9975bc1
SHA1

1b925440324218c01282f855fe1d1c291c5c36cf
SHA256

41f69d2ee1b520c3b7b6f890f1aa179e8e4e7b42e0ee9bde0d0bffe6ee99e21b
SHA512

29cb981be3d6d7e50d636935fdd53bd1eabfc834b56a77d729fcd49924434ec2651cf55ac6946f32164692b44d8c4ad6dd28a04f672ff3dfbe5e11b1a6879062
SSDEEP

12288:bk0XiudESMUO8I0+D7qihM8et98+32tGV1Q66evxPfIDx8yy7BJI3:Y0yudEDrR0iqiMX8+3sZ3evxPf4xGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO# 231001759.exe

Files

PO# 231001759.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 738KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ