PO[.]4563[.]0002_2024[.]exe | Triage

Sharing

General

Target

PO.4563.0002_2024.exe
Size

639KB
MD5

f0cdf9074d86fcfb552c916094f28c73
SHA1

d617a2330c6ec68ab3f11562a131c04b3f22c758
SHA256

da1bb426793a35f93556a8c20087a7eb4850c0858c5678d7b17a2c8a580855ad
SHA512

0dfb88d9cd9b97077ee9dfe74548e2a8e7e71f8bae07e624697e2123bc5e52e90bd5da92b2b3a425e04454a247371eb86e9cba7a5016a37c1e77d5a5e90b4a33
SSDEEP

12288:BOJRYWqTFtiE4w2ScqPGlBigdLY5Fr+aXlw9B1AEt0ktNxjxoQS/Q20y:BOJbcFtiE4iNP9gLI+aV6vBtT01QNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO.4563.0002_2024.exe

Files

PO.4563.0002_2024.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

grqe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ