General

  • Target

    NOTIFICACION_PROCESO_FISCAL.zip

  • Size

    1.6MB

  • MD5

    8425a72b33d7542a61df6128452e0bf1

  • SHA1

    ab00140888628fed62f025f22e6dde92569bfad9

  • SHA256

    42cd003d51ecbce1731e918f8e46decce104c22d65a2473206117c9067b0996c

  • SHA512

    21617ffbafdb696fc1452a043df7b53b62cd1799746a9f492a2f3da6a6261426c02c193122949721426e2f7393112be5d97ecc82597dc1a19d3cdeeb540c6506

  • SSDEEP

    49152:MTnLVUqViPaCcUJfWUAfS+2Qn5FiBXN+cHvxXZ:kUqIPa0JuUdly5FiBIqJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NOTIFICACION_PROCESO_FISCAL.zip
    .zip
  • #6 NOTIFICACION PROCESO FISCAL..exe
    .exe windows:4 windows x86 arch:x86

    013b5b8276709c2ecd2887fac380e33f


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • Microsoft.VC80.MFCLOC.manifest
    .xml
  • http_dll.dll
    .dll windows:4 windows x86 arch:x86

    e741cd0919fe3a9d075f43a89ce7cb10


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    4ca444b09cab86ae48fe835cb05c6e94


    Headers

    Imports

    Sections

  • monokini.iso
  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections