Copia de PAGO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Copia de PAGO.exe
Size

989KB
MD5

3c2e49ea563f26c0ef311b2b127ddb82
SHA1

c803fb8d0184027a477265b66fbc18374bb60ae2
SHA256

bb62463dd544f9d02a4d30c1cf2ab1c213bcd27dffbc40003c956ab64039ad60
SHA512

54d54765a0271c0d1dc153f940098372270d443ba6a856ee65cd1310d834ee42fd6cca2a87caa10f1f5415e94a377a398be5e57c79a73d1cc64e804bb35f2fd7
SSDEEP

12288:L7/OxpMggpggggRgggggggJggggpgggJggJggJggJggJggwggggwggggwggggwgC:LqB6Vqk8S+GyjcbM9y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Copia de PAGO.exe

Files

Copia de PAGO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 983KB - Virtual size: 983KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ