SOLICITUD DE PRESUPUESTO RFQ #180222CO24 y #160222CO71[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOLICITUD DE PRESUPUESTO RFQ #180222CO24 y #160222CO71.scr.exe
Size

1.1MB
MD5

3f0c2e36251e907ec249de6a02628bee
SHA1

9531d6a0c0be22ec3d36a2eaaf1fc96f997a9539
SHA256

3f91df1694752e2393e88e98c63348a310db58b7665d6e9d2ec7b2e84344aeda
SHA512

3ac8f8c9d6078fcbc5c1e466b59d5f5c85c0ae363b6cbe5e7621fdb8b586ad3d9d9563cfc19c0a0b620db0f719287a5f75769ed956c9846d374e66e814829f97
SSDEEP

12288:eo1mZWdG+Q25wOymUo04zNbv/dY/gmfXJJG2uZX8H5ZravCmhOX:e0pG+F53ycRVv/eIKGfZX8H5tav1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOLICITUD DE PRESUPUESTO RFQ #180222CO24 y #160222CO71.scr.exe

Files

SOLICITUD DE PRESUPUESTO RFQ #180222CO24 y #160222CO71.scr.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 535KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ