PO TIYEY078K[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO TIYEY078K.exe
Size

870KB
MD5

799014b55d0e11772683483ffbea3430
SHA1

c75437a1d401c139bdbb82ccbcb8a9f3de1333f2
SHA256

d5817e8cfa2e2f8abb5feea016308efb1cd84e4f15ddd6b9e48692f626b8f927
SHA512

086dfd220a6b78b9db515f7319d9a135ebde1c462b75654bccef319643b484677eb65e33c991a394bb05cdb1cb651720b04f86dfc3f479cc032c1004c999eca7
SSDEEP

24576:2hNDsYdbbmBZM4D2sDdUKc1THDTZgTBrf5J78:MtlmbM4D2spUK0THxgTBT5J78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO TIYEY078K.exe

Files

PO TIYEY078K.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

eFEP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 864KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ