pakistan[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pakistan.exe
Size

120KB
MD5

1fd3d094d1683dcb50a3b44e3168eee7
SHA1

0f26ba565dbefab0ef37683f9600383b62fab5ce
SHA256

db04d3d4c8bb60d5fcfbf9030006601a81657cc9359fc9cd6d81ec9a0035869d
SHA512

5e37ef1061aab8bdc05a1c98041b6f65ac0d863cee64f44bebcd5f58f6a9b3aac37ff48a060d2e27d5c9bfe0a625d3c2e5dc782647c3b71bf5bc64ea37aec163
SSDEEP

3072:hmajKcXZZNg48TQnBCOd+XeUL1mGphapNfcc8nUYwd:4Odk1hYsnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pakistan.exe

Files

pakistan.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ