OC 1609 SOBEK Ingenieros Chile 20230829_PDF [.]exe | Triage

Sharing

General

Target

OC 1609 SOBEK Ingenieros Chile 20230829_PDF .exe
Size

916KB
MD5

5a0d66185fc03a6d8e34a35b8fa0f9c1
SHA1

38fa755943aefe22a9115491771921b6b92e4cc2
SHA256

3d935f0a6fe7d1aab765773855319fccf188e0b5704626d94574bd1b88a16b16
SHA512

f59d7db127756b5de10ab282c67c0fc2d62b557395516ea88da470256f39913773315a7795ee9d13c76c17b3202c234f5e18fd2026c5d29236fbb985b06cc8c0
SSDEEP

12288:oklBLFweUzGsa/XkIlidgSOS5h6ek4GFOZCjEcvdZ9AvwEbjDR9eWU:dB5Uq/0IgdNOI6f4GFOZCjLVPAva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OC 1609 SOBEK Ingenieros Chile 20230829_PDF .exe

Files

OC 1609 SOBEK Ingenieros Chile 20230829_PDF .exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 820KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ