mkpub_AEAT - Aviso de Notificación[.]rar | Triage

Sharing

General

Target

mkpub_AEAT - Aviso de Notificación.rar
Size

492KB
MD5

3850e0ce2b16792a73d7ff5e08d2ba45
SHA1

fa75b7dd1ec8930b7e30f7635b193d1bead4e4ee
SHA256

6db4ceaa8c74088c9b31943c343a1cd6abeebeb1fcbbf75aa7f56cec9b0e0abc
SHA512

ce5c3e0cd672bc0b48e28cab9e48dd796919514f34ae434f3610c82dff528594447dcc0c16001503b12c4faf65b6f1d06635e74226fc08ea010bd69ed397493c
SSDEEP

12288:Hqo3OlfILpg3sHpXkzWKKYa90ExwrdGc0mUp:HGFZ3s4WcqSjUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/AEAT - Aviso de Notificación.exe

Files

mkpub_AEAT - Aviso de Notificación.rar
.rar

Password: infected
AEAT - Aviso de Notificación.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ