Pandownload[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Pandownload.exe
Size

4.9MB
MD5

4c323f8066e19b08f06bcb1e395634e8
SHA1

b6b3c321bea0d26527515a31980a13bdc4b630b0
SHA256

0b0d56d433f51c04e32be10d91d21ad0c1622a64f3e9ad4a004fc0064eee4581
SHA512

fb0b16dff1839bbf389176d3e7f999551795a4f19540d371cff04719a3e5ecbec7969f8512587c91ab784d42750286acd200fc57b9592722b09d49ed154aff51
SSDEEP

98304:x/SfYmicVIY7k0q6zsMJqCWvANcvwrOMw9K/XFWQqBAT+nq4:IfnicVH7kx6zsMzWKcvwg9K/XrqaTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Pandownload.exe

Files

Pandownload.exe
.exe windows:5 windows x86 arch:x86

49550203287cd76e23698443898b8658

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile

advapi32

GetLengthSid

comctl32

_TrackMouseEvent

comdlg32

GetOpenFileNameW

gdi32

GetTextExtentPoint32W

gdiplus

GdipDeleteStringFormat

imm32

ImmSetCompositionWindow

iphlpapi

GetAdaptersAddresses

libcurl

curl_easy_getinfo

lua53

lua_setmetatable

ole32

OleLockRunning

oleaut32

SysStringByteLen

shell32

SHGetPathFromIDListW

shlwapi

PathStripPathW

user32

TranslateMessage

version

GetFileVersionInfoA

wininet

InternetSetOptionW

winmm

PlaySoundW

ws2_32

shutdown

msvcrt

strncpy

psapi

GetMappedFileNameW

Sections

.text
Size: 3.8MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49550203287cd76e23698443898b8658

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

comctl32

comdlg32

gdi32

gdiplus

imm32

iphlpapi

libcurl

lua53

ole32

oleaut32

shell32

shlwapi

user32

version

wininet

winmm

ws2_32

msvcrt

psapi

Sections

.text Size: 3.8MB - Virtual size: 7.3MB

.sedata Size: 1.0MB - Virtual size: 1.0MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 16KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 3.8MB - Virtual size: 7.3MB

.sedata
Size: 1.0MB - Virtual size: 1.0MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 16KB

.sedata
Size: 4KB - Virtual size: 4KB