Static task
static1
Behavioral task
behavioral1
Sample
PasteUp82.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PasteUp82.exe
Resource
win10v2004-20230915-en
General
-
Target
PasteUp82.exe
-
Size
2.4MB
-
MD5
46483349e48eee158825f045b3d57100
-
SHA1
bf58f415b25d5e510274631804669266dfc6cc5e
-
SHA256
a80c113188cdab072e8001931807d1cfa7e0c079a4a8dbcc66060b7dc2a98c1b
-
SHA512
84484a8545b407c343e4515fa4c6df5d9d6674534b3dda255cf4c66a1ceb0f57e5a2ce7e51be4cec067837f8592e793f154861b12e9de5e222add979a675d289
-
SSDEEP
49152:B3aaKmyX6gbaaKmyX6gBpfXTiYaXghq27J8r:B+KzKGpfDikJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PasteUp82.exe
Files
-
PasteUp82.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ