Orcamento_rvtj[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Orcamento_rvtj.exe
Size

4.2MB
MD5

e74fd13d30ad1f265ad762aba3200c19
SHA1

fd8b2d9c645849fbd9cf7cb577c28567dc4e9865
SHA256

59565ee88145561974c405f5475426c31e7976eba33946763392fe8379ea42f9
SHA512

fd77f7f66db035bed89485de4104bd3058fa34895f49b340dfdd72bde9094a105f69c4cdb6049a55b6abd92729d4e3774e2a476470f816bd2e163bcace0f67f0
SSDEEP

49152:TnsHyjtk2MYC5GD4vBvcDxY3EcLlkZBLiKboRxcI9PbTixY5A07gr1BdJxRz6lW0:Tnsmtk2arvBva+ESlkZ5Y5A07gr1Ba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Orcamento_rvtj.exe

Files

Orcamento_rvtj.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ