mkpub_1_REMESA_DE_ADEUDOS_POR_DOMICILIACION_XXXXXX2116_2023$10$03_1[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mkpub_1_REMESA_DE_ADEUDOS_POR_DOMICILIACION_XXXXXX2116_2023$10$03_1.rar
Size

573KB
MD5

975d1e9f5c89402b44cbc2c896ccc2bb
SHA1

a852df528d265f709bcf5e3975a26f2f76ce9391
SHA256

3d3afd3337af604c643d4370f41ad5d1a6f7e1f0edec208aa2290113c6700e6b
SHA512

7fd8b0d66d6603e75b60fabfbcc325311f246579d7a359fb93e87085b7fd40b1f2da1035b13ee1f057a2003c7991f35f8c8517b5b892ba87c3c198cb369e8e2d
SSDEEP

12288:TbuK6Ccfp/IkNexYvb2lRh5UerV+NY3MwPYTzq7GbLDDPDq2ydHJvdK1wPW:WKVcWeexYvkRvUi+NkMiYTzqyDLDx8pW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1_REMESA_DE_ADEUDOS_POR_DOMICILIACION_XXXXXX2116_2023$10$03_1.exe

Files

mkpub_1_REMESA_DE_ADEUDOS_POR_DOMICILIACION_XXXXXX2116_2023$10$03_1.rar
.rar

Password: infected
1_REMESA_DE_ADEUDOS_POR_DOMICILIACION_XXXXXX2116_2023$10$03_1.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 598KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ