PO 240103728 & PO 240206581[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 240103728 & PO 240206581.exe
Size

730KB
MD5

7a99273a94e788bc3981343cea080578
SHA1

34d0853a3b44fc45a6b8cb5a0a61ec8a0788d195
SHA256

cc44c9da225d5bb94ba1cbec5df9a824bf537b1042322c038bab41f2ffceaffe
SHA512

0e57e8882ccefcfbd51e41cd28da0f0fcc65006c7ddbd78f4f2200238b5b8c3b90e609d6d57de11dc58650064ed45cc5e76800501d9dde81b2e95a7493ea1460
SSDEEP

12288:dgsmZWiqyJMWc834VsbgsLcWMAAdUxcUIdXSsnc+x2pTbFhJwIx:0o5OW834rovDOit+m/DJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 240103728 & PO 240206581.exe

Files

PO 240103728 & PO 240206581.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

UcCT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ