PO#98540-00[.]exe | Triage

Sharing

General

Target

PO#98540-00.exe
Size

701KB
MD5

fe46e2fc578c6f8788cba694e64c71fa
SHA1

5962ff7fb535fd8435dc4bf4f1abe1a70e731801
SHA256

487a65a744364c95696bf450fe78819afac41980fb6a106231f84aa0835aa5f2
SHA512

0392998bfc22b0c62e64de62d5ead1f5ae2d3e40b050ea2c44ce0bcd98eabe3d7044d99c63473ede5b595fa0f2df189a603430c4dc40a844789e3ba8590111de
SSDEEP

12288:ePWa+Axv0f/nkXFwy0X+LtYKnrX0gw4ta6iGqHw1UwnRWlo/SX3sh+35JkH:jA8kXUX8Xr0gwgZRwGSnsukH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO#98540-00.exe

Files

PO#98540-00.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NTiU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ