PAGO 95869[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PAGO 95869.7z
Size

564KB
MD5

abb54893d8f4ce0ae41b59a0b4ef599b
SHA1

6f3119d4611609006f2621af2ccd2275acbeed2f
SHA256

871382c55b9c34a9a0636cde7db0b5259d927249a778d0fa6aafb8f8418cadc9
SHA512

e054a1fa740e309589fbb833159682b9ab226d20a53c6b5c43789d87b596bc01cd14f0120ce6ff027ed7be6b47b88eadfb0803dbbee75d66541db96edcab1168
SSDEEP

12288:P6w8fGL2ZNQkWu5NEp7ANinHFp7N/afQw+zhB/pRhSKzMTGtGb1S7bofFW:PQf3WoEANinlpgfIj/pRhSKzMTGEb1rI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAGO 95869.exe

Files

PAGO 95869.7z
.rar
PAGO 95869.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ