pablozx[.]exe | Triage

Sharing

General

Target

pablozx.exe
Size

1.2MB
MD5

7456977c738208470a01d84ed531f081
SHA1

bd9083a032ecd51b10b97c95136d46c678508a6b
SHA256

a8365f11592d8734cd2ca079a900cefa76831f672034a234aeab699f0c6cf0e5
SHA512

9abcc7d10d4d39362611438eec4ca766cb62e85b6dca66260edd8434c46cd8997bf3af5f22e886353590135936e78ab1f0bf3e225523b645f2e25000464b5950
SSDEEP

24576:eFjEtEIaUGEKFHyjWhejQ9fzed3qRv0R69H2yedYl3/5L6:CsEzNbHyj4eEQ3qRo69NUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pablozx.exe

Files

pablozx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 858KB - Virtual size: 858KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ