PO 2942024[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 2942024.exe
Size

685KB
MD5

95f47649af49eb2bd587036e86d73616
SHA1

e03a6626b72b120b4e0b3746d7d07f929498c59e
SHA256

461dc2509572b54f85ba0aed30d4a9969b0fcbf156da5f177270f741398e5b8e
SHA512

663e89900d426f9c6010c2b5125c97c1448a0bb37b615e31825306e749d1b5ff240b22796ee43e053af32048bf18debd23436f9d5ec14296c349275691782118
SSDEEP

12288:0TB778QNRc+EACzS6h1I3UoGKLvQRcSbuT4w4ajMK18szCR:6Bezf/AnIWYO4MF1xz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 2942024.exe

Files

PO 2942024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ