OFXC_PROCESO_REF_2023-0581-39416[.]tar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OFXC_PROCESO_REF_2023-0581-39416.tar
Size

1.5MB
MD5

6d633bd3ca9e59e02750c7b8d44b0785
SHA1

c1afbfb420b938270f1bae4e168cad9b567b338d
SHA256

d86fe29bae8dbecd40bc6c5be33034144930aff606a1a43ce4f406eba4bba381
SHA512

f93a9ce1a6fbec9fc6c0e6f851858f11d2b98efef592c9f05a140ee7f4257f6c109bae29e0ac4ee51300f51ef68350ae3ee57e67dfd7acd5114994980ae7aaf8
SSDEEP

24576:q8pqjhxNxmvZrWQGJU/NXM5FC1XQ4w1rcsUa5J+wStYcSnO6j73yWGULah/K7ZWG:q3hxNeZYtLCIrHtJplnOysS7ZW2K4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OFXC_PROCESO_REF_2023-0581-39416.exe

Files

OFXC_PROCESO_REF_2023-0581-39416.tar
.rar
OFXC_PROCESO_REF_2023-0581-39416.exe
.exe windows x86

Password: 6133

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 509KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ