Pago_655479993737373738[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pago_655479993737373738.exe
Size

714KB
MD5

6ce97622c37a38dc29cda30bd0ff6c96
SHA1

cc3ab66749bba05d8a15bf86e9829326d73a58f0
SHA256

72e582aa7386568e0d8297cc53c41d7e2d8516895a9baafdac66626e9a9a968f
SHA512

486403befaf0aceb344b5ee8d414f4b94087a3e081f0840bf6884ef1d449857dc8ba1f6bd5663cac6ecd0b7432063088c65492fc46267e7a6f6f41e111af4b08
SSDEEP

12288:VaCR5leZlNatryCpkWrOe2+9Qz33Q6Owo/OxuS4SUieppHcW3kIYc9:I+erWjpkpI630/gJ4Aepp8Qkdc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Pago_655479993737373738.exe

Files

Pago_655479993737373738.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 704KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ