PO 077-57676135[.]exe | Triage

Sharing

General

Target

PO 077-57676135.exe
Size

714KB
MD5

f8fe6881e21dcba5b78d693f96f56c6f
SHA1

15bad9cbbc0bb09e66ab78929a5ce632da652b78
SHA256

4210e25c33df901302fe42704fcd0832729e4efade9da5abe6a8f2512244024f
SHA512

e0bf8b7105cc94bb126db2acabf321eccbcc26852ffb19c754bbb8f733d135c877c92adf05fc3c3e4efe923ee38ba26cfd25424b53c46e92e6b1381d64ebb77c
SSDEEP

12288:wX0pxhV36Di8BtLExdWe2kD3nmXbvtbZGh/C3f+hwGsxNPigJNS2wrk80:tBFKKxYe2WnaFItrhwztlfO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 077-57676135.exe

Files

PO 077-57676135.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 702KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ