zIKgETK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PAGO -349.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PAGO -349.exe
Resource
win10v2004-20231215-en
General
-
Target
83e23b600bcc6a227cb73fc99a665198acf94389a89db05b516868c0efa1c149.iso
-
Size
784KB
-
MD5
2c57261e29cf1baa469a62e30ba1c55f
-
SHA1
134cc042674e74e2a515c61a531ba7801898694a
-
SHA256
83e23b600bcc6a227cb73fc99a665198acf94389a89db05b516868c0efa1c149
-
SHA512
726de34709ca81c75fe17664921160af88df11cdd9609cc5538ca52c830020c52ffb54decbb36b698313497199b955e955580663ccbface89660f7abe1f118d4
-
SSDEEP
24576:T6t3ZFnsyvk4aO3zYphqM3hfUT9e3hjcl3:2tJNsyM4HwM8hspeRjc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PAGO -349.exe
Files
-
83e23b600bcc6a227cb73fc99a665198acf94389a89db05b516868c0efa1c149.iso.iso
-
out.iso.iso
-
PAGO -349.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ