PO-BD744656________________________pif[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-BD744656________________________pif.exe
Size

786KB
MD5

ebbbc95ceef86e2479fc38291fc124ea
SHA1

da13ad4166fab544280d2265bec5470b6a0a5069
SHA256

7a3b0b73b500c88fdf56432b3033f93ce7f8c22c0de24415cfc9ab2327c733b7
SHA512

fcd416344e0b5068391c4b43030da339102be916c020a1fa480582d506b35e0d4c1acbaf001c9bd96ba4339b108c343dfc91d5e7fab71b2be122730f96c20515
SSDEEP

12288:LOultoVg9crW4YvvnXW27LKb9poYjPXR+1FfmA0EdQcg:Nig+y4YvvnXW27+b9poY7XR+1Ffmxkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-BD744656________________________pif.exe

Files

PO-BD744656________________________pif.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ