PawnIO_setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PawnIO_setup.exe
Size 3.3MB
Sample260925-jmjtxsca39
SHA256 1f519a22e47187f70a1379a48ca604981c4fcf694f4e65b734aaa74a9fba3032
MD5 956e73fc2a40945bc66af3a3ff963371
SHA1 096660b9e3aeff0547dfc621c03953852afd4629
SHA512 9415a97341dfc69d34c4f7f5081e70782ba712d8ea7d0c2ea2b44a0e90b1567cd53e400b3d29562b723d3763e0ff00116e97e2072d3fefc3a1821413aa937afd
SSDEEP 98304:kvJ5ux3qNj0iINNFe4TBGOzq2j29hGny1xdb+16w:kvrux3m0iGcqjljCo4d6Uw
TLSH
T12EF51233D2E1B198CD95C7F0D6285DA25CEEBC45CBE57CEBC783A3292666AD09130706
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

PawnIO_setup.exe

.exe 3.3MB

PawnIO_setup.exe

IMPHASH 2dc7f4df09d86c9712fe5fb25a98b9c0
SHA256 1f519a22e47187f70a1379a48ca604981c4fcf694f4e65b734aaa74a9fba3032
MD5 956e73fc2a40945bc66af3a3ff963371
SHA1 096660b9e3aeff0547dfc621c03953852afd4629
SHA512 9415a97341dfc69d34c4f7f5081e70782ba712d8ea7d0c2ea2b44a0e90b1567cd53e400b3d29562b723d3763e0ff00116e97e2072d3fefc3a1821413aa937afd
SSDEEP 98304:kvJ5ux3qNj0iINNFe4TBGOzq2j29hGny1xdb+16w:kvrux3m0iGcqjljCo4d6Uw
TLSH
T12EF51233D2E1B198CD95C7F0D6285DA25CEEBC45CBE57CEBC783A3292666AD09130706
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Digest

53:30:8f:04:43:5b:2d:9d:d5:b0:0c:37:89:dd:2c:61:59:09:23:88:2d:26:52:25:9b:dc:32:2d:77:2e:6c:46

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=namazso.eu,O=namazso,L=Debrecen,C=HU,1.2.840.113549.1.9.1=#0c1061646d696e406e616d617a736f2e6575

Chains

Mar 15, 2026

CN=namazso.eu,O=namazso,L=Debrecen,C=HU,1.2.840.113549.1.9.1=#0c1061646d696e406e616d617a736f2e6575

CN=GLOBALTRUST 2015 CODESIGNING 1,OU=GLOBALTRUST Certification Service,O=e-commerce monitoring GmbH,L=Wien,ST=Wien,C=AT

CN=GLOBALTRUST 2015,OU=GLOBALTRUST Certification Service,O=e-commerce monitoring GmbH,L=Wien,ST=Wien,C=AT

Subject

CN=namazso.eu,O=namazso,L=Debrecen,C=HU,1.2.840.113549.1.9.1=#0c1061646d696e406e616d617a736f2e6575

Serial Number

4f:3d:79:e2:3f:36:fc:99:9c:b6:22

Issuer

CN=GLOBALTRUST 2015 CODESIGNING 1,OU=GLOBALTRUST Certification Service,O=e-commerce monitoring GmbH,L=Wien,ST=Wien,C=AT

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment, KeyUsageDataEncipherment

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 2, 2024 - Aug 5, 2027

Subject

CN=GLOBALTRUST 2015 CODESIGNING 1,OU=GLOBALTRUST Certification Service,O=e-commerce monitoring GmbH,L=Wien,ST=Wien,C=AT

Serial Number

01:f9:c5:34:2a:d3:cb:20:65:93:e4:ce:56

Issuer

CN=GLOBALTRUST 2015,OU=GLOBALTRUST Certification Service,O=e-commerce monitoring GmbH,L=Wien,ST=Wien,C=AT

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 25, 2016 - Jun 10, 2040

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:7A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:5b:4a:b5:8d:41:32:6d:dc:74:00:00:00:00:00:5b

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 8, 2026 - Jan 7, 2027

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ntdll

LdrAccessResource LdrFindResource_U LdrGetDllHandle LdrGetProcedureAddress LdrLoadDll NtClose NtCreateFile NtCreateKey NtDeleteKey NtOpenFile NtOpenKey NtQueryDirectoryFile NtQueryInformationFile NtQueryValueKey NtReadFile NtSetInformationFile NtSetValueKey NtTerminateProcess NtWriteFile RtlAllocateHeap RtlAppendUnicodeStringToString RtlExpandEnvironmentStrings_U RtlFreeHeap RtlNtStatusToDosError RtlRandomEx __chkstk _snprintf _snwprintf _vsnwprintf _wcsicmp iswspace memcpy memmove memset sscanf wcscmp wcscpy wcslen wcsncpy wcsstr

comctl32

ord413 InitCommonControlsEx ord410

setupapi

SetupDiCallClassInstaller SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiSetDeviceRegistryPropertyW

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

BeginPaint CreateWindowExW DefWindowProcW DialogBoxParamW DispatchMessageW EndDialog EndPaint GetDC GetDlgItem GetMessageW GetWindowLongPtrW GetWindowRect InvalidateRect LoadCursorW LoadIconW MessageBoxW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageW SetWindowLongPtrW ShowWindow SystemParametersInfoW TrackMouseEvent TranslateMessage UpdateWindow

gdi32

BitBlt CreateCompatibleDC CreateDIBSection CreateDIBitmap DeleteDC DeleteObject GdiAlphaBlend GetBitmapBits GetObjectW SelectObject

Sharing

General

Malware Config

Signatures

File Explorer

PawnIO_setup.exe

ntdll

comctl32

setupapi

newdev

user32

gdi32

generic