PO23100076[.]rar | Triage

Sharing

General

Target

PO23100076.rar
Size

616KB
MD5

ed8068b0f0253106e6ee2ef413f306f3
SHA1

8089343ad1471f7d36dd5d7d51db53b1a59876f1
SHA256

cbc15d628a0987a96c8a479230e2b6bd0dc8461cb31aee8abe99c7d16a62b4c5
SHA512

28ec4499ffa880416be0909c4a81fe78c24b825b602024591ba8c97213981fa0bb6bb150a2ff4943c4404240e3de0e479a6337c58a806e16ae7afd73fd9f2007
SSDEEP

12288:C26leNILgukEmHHjjIFNnU87vw2RAo8H/+OoUZGzPoXQD3YmikM5pC6RvxSk:C2qeiLgPn2a8Tw2RAzH/+x7wXQLYF53H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO23100076.exe

Files

PO23100076.rar
.rar
PO23100076.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ