New POs# ST-2312180[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New POs# ST-2312180.exe
Size

667KB
MD5

cf2184e9a142074e80ce4de7c4ff9976
SHA1

d206666a51a7545003eae0c397637e884b3c5daf
SHA256

4af4e807a39641a52d870358fa8b6486927f7f5daeb94a2a75d9e117ba41a3ea
SHA512

17eb0e981e6057a99f888350222105614139713d96f885103ecc82f432f874fe680b68dfc0ac39b88d6e1714e23d9e1b16cf136ae273497cbf75aa84590eb6ec
SSDEEP

12288:tSmPwRYnOELz89vqTXKOPgT4PnckwNtSs5hfayvJrsJVkaOvC:tSmP0Y74vM6akXNtSU5TvJrs/jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New POs# ST-2312180.exe

Files

New POs# ST-2312180.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

gfQA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ