rPO_CW00402902400438[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rPO_CW00402902400438.exe
Size

700KB
MD5

9d2a73cf8ebd46cc833de56c9940d0b7
SHA1

b5b76de46b9d3175c21dc5963fa5c3e85ca29996
SHA256

96a414f408bf9ccc9b692b2dc5a4faa115e752edecdd5f2292c3135eee522b93
SHA512

c7bf6b079f7d894c9fefe4c17449c76f8b9533f11521b66b4ceb7c1d9f03b2cad3bf727a56ea0b7ec6105d0f4bc91a8dae7f44dab07a193cb458e22dd3b1dc6f
SSDEEP

12288:Gd71xg6zxcZOtyG5t4naxZvbUL0YIevp5sFy446x/pVM876/pBL0Of+E1pDjw:v6ziZGgnax9bUL0Cvok44ALL0fzf1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rPO_CW00402902400438.exe

Files

rPO_CW00402902400438.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Lnfe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 697KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ