PasteUp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PasteUp.exe
Size

2.4MB
MD5

98220d0605ba454a7f0f771a1f130e4a
SHA1

53b694d444cd4f489ce5d6379b0bc5a511fc6f3f
SHA256

30a5da6c0b04fa3b1261e85bf2d929d069a4200a5a96b9158b7ca555e232bd38
SHA512

c8aa887b5deebc5a33d45dba2ef77c1bc1e3e19404e92b178280a553f86370565e1377d8f4acbb74f4483be50622ed354a91ec11b8253037440d2c445924a04e
SSDEEP

49152:43aaKmyX6gbaaKmyX6gBpBuAC32oJ9URr:4+KzKGpU932oJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PasteUp.exe

Files

PasteUp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 612KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ