Nueva carpeta[.]rar | Triage

Resubmissions

20-09-2023 23:29

230920-3gpmrsbb9v 7

15-09-2023 00:41

230915-a1xs9sga8y 7

Sharing

General

Target

Nueva carpeta.rar
Size

104KB
MD5

901af3546289defbb11cdb2063ea488b
SHA1

cc14f920a953160de7f9e5b3cbef9e6c6ff13a40
SHA256

a4e62067f65cdf84d9feab61d0b377f03b2da466aeb0b7494757c6ff2886c933
SHA512

fd5b56c008b52a757b081b89c7d911b92ab55b768645a311caf3490b9c7b2c07399ef0d220ed121e8d89574c7756359173d99df8df3524304518318040e502a7
SSDEEP

3072:nYPoIuOnM27wlyIa5MYPoIuOnM27wlyIa5n:nZ47wcD5MZ47wcD5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nueva carpeta/MS_Office.exe

Files

Nueva carpeta.rar
.rar
Nueva carpeta/MS_Office.exe
.exe windows x86

b5688d14696c0efcb4bfb3c1231064a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord598
ord520
ord525
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord531
ord716
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord578
ord100
ord579
ord610
ord616
ord617
ord619
ord542
ord545
ord580

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nueva carpeta/MS_Office.rar
.rar