PO-3056598 - Metal seated Jacketed BV - HPL[.]exe | Triage

Sharing

General

Target

PO-3056598 - Metal seated Jacketed BV - HPL.exe
Size

788KB
MD5

a151fba9daa94387ed898e19bb533be5
SHA1

64aed2cec20be2f4c11f3ef9dec93624516da4c2
SHA256

45aa9c752530b71775bbc59a49604fe2f8f10a3c98be4e3d789d307eebf69b9a
SHA512

fef90f2a901b2a7940c98d2cdccb639e4ff4b039650a411f20ed9610e7e56c3a30ecdae7c7d8dc49f913b29b264bdcb12d7baf038d9719d4f050b35461a6e8ae
SSDEEP

12288:lgmY00jXolyiT3HaYHrm/Iq1QArPUS7l00PO58MCyAoFMOM4olj0:lgmdI0BH4Hn8Sh0wyxFMOYlQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-3056598 - Metal seated Jacketed BV - HPL.exe

Files

PO-3056598 - Metal seated Jacketed BV - HPL.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 771KB - Virtual size: 770KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ