Static task
static1
General
-
Target
Pako External ob44 V1.5-Dyn.exe
-
Size
26.5MB
-
MD5
6c50ea714b9ab2f574698cb8f036da4a
-
SHA1
b9d3f59f70e76763d01beb3750f900927516a3f9
-
SHA256
07a1c51073ad80d4699f1fd05fe61aee03a8d12b624fdc7fa8f1e953c9e5bcc1
-
SHA512
853b3a170eee18745a422977aeb6076d2af2c854ba88f63ccab1296add55f973aa71929459e3e61d69b45de1df21b2e3059a7e2cfdf1133dd3d6ac1ca140980d
-
SSDEEP
393216:446ob1SytY0nIH4Zus+Ca/ZvEEGuvqsWvCvyjtyc9e4ltBVkEIxjCZdTH2m87e:LSaY0IrsmFEhuvqsWp7tB+EIwC3C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pako External ob44 V1.5-Dyn.exe
Files
-
Pako External ob44 V1.5-Dyn.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 26.5MB - Virtual size: 26.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ