14112023_1922_13112023_md5001000003347[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14112023_1922_13112023_md5001000003347.rar
Size

567KB
MD5

f6230a412ac9c8304283ed4f0ea58e51
SHA1

0f7ad6f0a02314724be4d4a3a353c57f0ae502d2
SHA256

a1a43a39a061e8eacfe98048ba12dae16828ab1206c388f741da1fd4080184c5
SHA512

6cfa3aa4ebedf024a2ba9b23c2b85453f202d38804ed5451839479ff062d905a2aeb38db099679c71e4470047085c0570c7c37725b5f76c4cbd5d8883f584c44
SSDEEP

12288:dOa+4zOZTOIhchRALrifUeyMilhLOv5Ybw5hoY3/4:dO/4q1fUSLroUebirLOGGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/JUSTIFICANTE DE TRANSFERENCIA_PDF.exe

Files

14112023_1922_13112023_md5001000003347.rar
.rar

Password: infected
JUSTIFICANTE DE TRANSFERENCIA_PDF.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 595KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ