PO - 12372[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO - 12372.exe
Size

859KB
MD5

fa541b3034523ddaf88adae8fd9bf27f
SHA1

605dd1fc5b53229338f734b1363dd77ec6e7a036
SHA256

8f4fcc4f1a75cfa629c80715419027558a808bbf8e99910011744b3e755be73c
SHA512

e37f30329e9549dd019121edb5ed6774a1eb6c8452bbabfc9abd76763058c64e879e97387c8e42f16aef5bdf192799a5b87c9e5dbc5e6256a4ea88f6041fe389
SSDEEP

12288:m1TMXHc4mBnMYsmH6ZEXIYitXj8iCO2xEW+6o0jkaRdaX0AYJexSvHLc2Ye:m6sd1H6O1it9b4fYkMqIxSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO - 12372.exe

Files

PO - 12372.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 853KB - Virtual size: 852KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ