JEALPER, SLU CONSTRUCCIONES S[.]L OFERTA 06032003[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
JEALPER, SLU CONSTRUCCIONES S.L OFERTA 06032003.exe
Size 431KB
Sample230306-qxc8fsce83
SHA256 60b44811e34b25b5b2dd20695ec6df5c1b6598248dcf7d1bc819996c770f8e22
MD5 fa11625713888e5cfaaccc9d82eaab58
SHA1 2c74fbcc7ebaa7d3c111c62edc6693557575b1e8
SHA512 fac95b62527590fd40ef6aa1245782877d352d36c58860b2fc9a0919a6cd236beebdbfec6194fc2b9297be821501fa2908686966878faa93a7ae77dcb6f77dcd
SSDEEP 6144:HbUTp15lOVWR4vFSf00DZUNAIIn2ZEq30TygnfI6RvLYEXi90sqVM+LA:HIJlsW8200VUpEZu6RDjsy6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JEALPER, SLU CONSTRUCCIONES S.L OFERTA 06032003.exe

.exe 431KB

JEALPER, SLU CONSTRUCCIONES S.L OFERTA 06032003.exe

IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
SHA256 60b44811e34b25b5b2dd20695ec6df5c1b6598248dcf7d1bc819996c770f8e22
MD5 fa11625713888e5cfaaccc9d82eaab58
SHA1 2c74fbcc7ebaa7d3c111c62edc6693557575b1e8
SHA512 fac95b62527590fd40ef6aa1245782877d352d36c58860b2fc9a0919a6cd236beebdbfec6194fc2b9297be821501fa2908686966878faa93a7ae77dcb6f77dcd
SSDEEP 6144:HbUTp15lOVWR4vFSf00DZUNAIIn2ZEq30TygnfI6RvLYEXi90sqVM+LA:HIJlsW8200VUpEZu6RDjsy6
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

e2:84:fc:4a:ac:e4:b2:bb:e8:86:8a:3e:0f:74:7a:39:c2:8f:5d:b4:9e:54:6c:af:86:40:62:b6:8a:62:85:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

PE Signature issue

Digest

17:1f:d3:9f:4e:06:4b:f3:ec:00:29:fe:67:a8:a8:f9:a7:f8:9a:73

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Subject

OU=Partiorgan Kolporterede Confutation\ ,O=Blockpate,L=Temecula,ST=California,C=US,1.2.840.113549.1.9.1=#0c175061776e62726f6b65724044616d6f7a656c732e55646c

Serial Number

46:3f:8d:db:59:ff:a2:c1:42:7c:2d:8a:8b:97:73:3a:4b:76:c1:52

Issuer

OU=Partiorgan Kolporterede Confutation\ ,O=Blockpate,L=Temecula,ST=California,C=US,1.2.840.113549.1.9.1=#0c175061776e62726f6b65724044616d6f7a656c732e55646c

Timespan

Feb 12, 2023 - Feb 11, 2026

Subject

OU=Partiorgan Kolporterede Confutation\ ,O=Blockpate,L=Temecula,ST=California,C=US,1.2.840.113549.1.9.1=#0c175061776e62726f6b65724044616d6f7a656c732e55646c

Serial Number

46:3f:8d:db:59:ff:a2:c1:42:7c:2d:8a:8b:97:73:3a:4b:76:c1:52

Issuer

OU=Partiorgan Kolporterede Confutation\ ,O=Blockpate,L=Temecula,ST=California,C=US,1.2.840.113549.1.9.1=#0c175061776e62726f6b65724044616d6f7a656c732e55646c

Timespan

Feb 12, 2023 - Feb 11, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

12841

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW SetFileAttributesW ExpandEnvironmentStringsW LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW SetErrorMode GetCommandLineW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW