PO SUNS788[.]exe | Triage

Sharing

General

Target

PO SUNS788.exe
Size

1.4MB
MD5

0230103d88fc4446732570869056cb82
SHA1

4ac4e34c9a80d5ca6e65c0a711e1b9f00dbb2d13
SHA256

de8869cf9b1e4881596e9b4a9cb6351228260dc42ebf0a91ec471f4e26b0d2ec
SHA512

8530cb687173d8d567d45fc18c1326b677206f34277a8559fcf9e16ede69ddd06cac9b7ef3495653c8affea005c5132ab5aa784a4d1bb06b7af9ce1edc635a77
SSDEEP

12288:awx4PnhWEl8Iq+alkg0KvPOoBH82T9A7nnH/X/Yzdc/Z77yRdkBBB:ZCoEJq+a50EPOoBjMfv5/ZCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO SUNS788.exe

Files

PO SUNS788.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ILmVO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ