PO 81049864[.]exe | Triage

Sharing

General

Target

PO 81049864.exe
Size

651KB
MD5

4c765261499478dd2106d78f31ef76e1
SHA1

8969ad90a18bb71d8554bb09ca71691d0baebfeb
SHA256

76f19496459a45cf204bb40e02420021ff88fa2d6bfb3c03d0249ba89c1cc0c1
SHA512

e38f744cbc5e44e4f0f2471cd907bb301e1161de016ae97aefb3474a5aa3c7cd14c14d84ae7d967f1dbfaff3dba6bbfa872a15ec659396559896322d542abb3b
SSDEEP

12288:ZuVrYCFd6xmxE1GSVkRj2mev0qITon6Wizf8SNZ2vM/j7jqBwR++cnjg:k81xmxOGSSRy2cnBSN4vM3jqBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 81049864.exe

Files

PO 81049864.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 643KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ