PUK ITALIA PO 120610549[.]iso | Triage

Sharing

General

Target

PUK ITALIA PO 120610549.iso
Size

712KB
MD5

5777c8b62a8be41c8b94267b0f09a02d
SHA1

3e2549e10716d20fd607bc5fe8d4546a99207cc5
SHA256

9f4946a4ac2a703486b6ef3dceaaece51c4c5b3249e15bb4cf503e2cf16a5583
SHA512

d17cb2af4406bda3cf0876ca7e80b741fe329f001f8fddd5d410ff79a1dcc88a1bd3080615dafdd1297f8752076a6af5cd6e7e892753b6d8accae177ba17ca83
SSDEEP

12288:usJTENl3a+1+UxRhsZzc3LKEUfzPdvpkF55CSuGxCkckJ+ZWsfeXjZ:7xENllxzsZzALKxuHuG7JYWsWXjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/PUK ITALIA PO 120610549.exe

Files

PUK ITALIA PO 120610549.iso
.iso
out.iso
.iso
PUK ITALIA PO 120610549.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RIoz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ