PO Copy_7854569[.]7Z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO Copy_7854569.7Z
Size

676KB
MD5

62156e7f6f24891771d4c3cbc78c0a95
SHA1

0fdbd85bc035f6322ad4ec90f3988511394864c0
SHA256

332c0a8d4dcc1b0569d1473425d0979697a4070f3be5b6d306a81f71d710dbb1
SHA512

a859b413aded564123a42a598e9d4a50f79a564ba7284287382798db5f45f67c28b668cb11879a46a5c9381dd9c404ed386858de53af60bb0855903b17e7ef32
SSDEEP

12288:5kt6QY8bO1ovyWzdt6H8p3hCcgw1blaNo8mVciKikMF02GNIS61a4cuUOu:x1ovzzdthp3tgWb8fdiTka02gvZ3uU7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO Copy_7854569.exe

Files

PO Copy_7854569.7Z
.rar
PO Copy_7854569.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ