PasteUp[.]exe | Triage

Sharing

General

Target

PasteUp.exe
Size

2.9MB
MD5

0df945f0ac7447579c9666512fd25f25
SHA1

f51cc1ccbd29a3ebd3f686caa8c98b07080380e0
SHA256

2b4aebb79fa977c77ab0ffcf2e5fe3238fa526717ab1e466bfc5c1e95862c7fd
SHA512

8463b6002b291bf9dccddaa5824893703ddecdeafe6854614b71ecb55a5e95e80f43aaed9ba3e88a3ea6bdb617ed0680e8b44f8d8b422c180cf2ea1150d330ac
SSDEEP

49152:Uzt4ztigacpCW9wF0HINIkTgPytn4ttDEyRFrp9:yk9wFz7Rnat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PasteUp.exe

Files

PasteUp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\WorkeERP\PasteUp_New\PasteUp\obj\x86\Release\PasteUp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ