PO-000001488[.]exe | Triage

Sharing

General

Target

PO-000001488.exe
Size

752KB
MD5

a66d3b103434f0225b062c009ab8eb3d
SHA1

2a8e5e0af038f4bc9c2d90bf69945acd8d93b918
SHA256

7f24d1a1ac882a4e9da16afa9f05464cc7b4a59aa42edd8855543a10319f5be4
SHA512

604b5f9db82130745531d9cd64d83a534ea94fb089a9a8baf208f0c172b0a0b3d9a0fadf5908aa4ff23e8bad7602e69622d3b49f1eb26beb067f35810e39c1e6
SSDEEP

12288:c8HXrixlaIH2qwgq2RJ4FS8nzqZYPDb3gs4v+ytWN6f6wJhFQDPUS:ckGxlaIGgq2RJ4FS+g0Dbwsct0EQAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-000001488.exe

Files

PO-000001488.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ