COTIZACION NOM 0220823_-PDF[.]IMG | Triage

Sharing

Copy URL Twitter E-mail

General

Target

COTIZACION NOM 0220823_-PDF.IMG
Size

1.3MB
MD5

e237387800239cd12bcfc59bf2f633c1
SHA1

fb30e4a640e65b515b898c3aa3a87fe0fca7e5a2
SHA256

c80924b135f6562c24256539a92092812e5ee66e5c7de2fa46944410fdf2242a
SHA512

ad9a93b8b0b54ceee4b8edca148f227da9dc4fd0e7b5845154e249ff4182e3536b6abcb41a9d4d1f14f6ab77f0e9d85dc484b8493e239413ab8bae40740ca82c
SSDEEP

12288:Rv+2d1mbTc9t9FalZViMcgNNX2+Ujsqc5Ad9m3rFSYxxpoNzOgr1vpg:Z6y3FGiMcgzm+OKEurFzkNzOMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/COTIZACI.EXE

Files

COTIZACION NOM 0220823_-PDF.IMG
.iso
COTIZACI.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ