PO_6034 INV[.]exe | Triage

Sharing

General

Target

PO_6034 INV.exe
Size

987KB
MD5

a1a78fc315e61f1397598dfd5c956e66
SHA1

ef2f21dce062e7e4dd39028d035ef5ed48dcdff9
SHA256

0009bc8a2fe8da5d1544b9685e1628ee13e298e821b80d426998f47c8fa96585
SHA512

afd7154b2c7d570bbeeeda5fbaddf3e00c04a6c7bef65cf6068301ce041754ee110e3839b1bcdee0b088fa67af8790fac6a7d759d1932e20df50012824d99240
SSDEEP

12288:pLMC3+OhNsjfNNUHUVyUDuFVdP5fzIhvBXQHvmx7rOYzImcGduwKktnFO6JK1+DH:xOpiSzDuFlrCpgHvmVEmFdXHJ648T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO_6034 INV.exe

Files

PO_6034 INV.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 976KB - Virtual size: 975KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ