PO-13228[.]exe | Triage

Sharing

General

Target

PO-13228.exe
Size

576KB
MD5

7038d7c37a57257518528cf5fc50dc1a
SHA1

0b352e9757af7c23439ec521171b2e05813bfe16
SHA256

0e95933b378d0fbe6e132bab051ab9a3ab4fa3332828e72a0133749c1150b79f
SHA512

ebdd545d9b8260b827376b6b70b47ffdc19eb32ee72acc16339c1af8bf6671e843019519ab03fa6058bc4c449bbfb7f8f129a13ef0f01ddbbc0fe9c718ad9c3c
SSDEEP

12288:0/JWqjqYBkH47mWq6fJqYQqxPcTO2DieaVTNeBz6Zwq:0YpUkg9qNqhcT8eINF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-13228.exe

Files

PO-13228.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 570KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ