SOPORTE_FIRMADO_No[.] 9Q2m1pnF3v[.]tar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOPORTE_FIRMADO_No. 9Q2m1pnF3v.tar
Size

1.5MB
MD5

9b7270d8218408d29103c013daa6218f
SHA1

9026d021260642c2aaca2c9a8ee9cf80fd37b63e
SHA256

f633069eb3349d94fc8e42a7b97f3d2b12884ab6ea4767174585bb57df7c0cba
SHA512

e852158575597f90604759418e34594802399d6d8750a60c092a133ea2a2fa6cb2c9070307942d2a6a7274c7b9113e9b6eabf953fc5e42ccbd8053ccea432b87
SSDEEP

24576:OCsY/qBkijeiXal2A4Ze4vYtkiOcwSL7ddnCoTjSAjGmzCR6BJNL3GZ90:OCsY/okiCiXal2A4ZFYtkMwSPnHfSMzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SOPORTE_FIRMADO_No. 9Q2m1pnF3v.exe

Files

SOPORTE_FIRMADO_No. 9Q2m1pnF3v.tar
.rar
SOPORTE_FIRMADO_No. 9Q2m1pnF3v.exe
.exe windows x86

Password: 2286

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ