PO 20240105[.]r15 | Triage

Sharing

General

Target

PO 20240105.r15
Size

654KB
MD5

ac56e339e6b154f878813d46a579c4e1
SHA1

892e89fd0b98b0cbd211566b263a2b4520608a70
SHA256

cdf2fecfefa949e315f8f0b887a11cd2d7c3a000af79ee637b25052eac663adc
SHA512

70c4ab697d6528b93a4ca5bc501386c43b749e25528d03cac4890a62162c3e6950a49e71ee383f25eed24b3d613c2457a1a2771495fbf4e108143fc1e4d11369
SSDEEP

12288:j7PWp0TQ3nSuW73kAqu+yhYIo+sWgRvu4Kw13UZ9DeEUYYluNwuuBN7cW:j7e6oST73xqu+yGLmw13UZ9DUZENo/4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO 20240105.exe

Files

PO 20240105.r15
.rar
PO 20240105.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HIQg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 724KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ