da09f808-0d1b-2012-3f3d-664b7734bbdd[.]eml | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da09f808-0d1b-2012-3f3d-664b7734bbdd.eml
Size

902KB
MD5

3dbc16ff7dc85e7808deb38cda908dfd
SHA1

547b3a6d59ee0c669cfc61cfaea6d7ff18cd94ea
SHA256

afc77b3d49a5c3e9f2c5d826a0074af7f7e10b99feebbf02836bccfdbbf1d711
SHA512

56351779be0a8476fbfdc03803d662e653274143f00dd6d26c388559a81b01784b99c4b859c58f2ffecaa8dd61211886aaa22abd8123fa3a948f30e8b4dae5d3
SSDEEP

24576:lO8BntNhCyey6pB52atOjjCNvxfk1lfLlhd+j:tntNcfLiKWLXdo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Justificante de Pago.exe

Files

da09f808-0d1b-2012-3f3d-664b7734bbdd.eml
.eml
Justificante de Pago.rar
.rar
Justificante de Pago.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 964KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-2.txt
.html
email-plain-1.txt
image001.jpg
.jpg