1e1b48d3c8fce267bea03a25667116fd | Triage

Sharing

General

Target

1e1b48d3c8fce267bea03a25667116fd
Size

90KB
MD5

1e1b48d3c8fce267bea03a25667116fd
SHA1

14bfcea7ebeb858087ab60825fc5136a15c53e64
SHA256

3030568cc135eaf6d62449adee7e34989e1ed68ca807adc682a952abef3878a7
SHA512

f090e70abbb72b2f0296ac7ef7c028e65432d4763ee8e78de265919abdb2efb565324ab9882689f7c7e1fbe8f6a46dc669210494b138372be75a6a2d5a78c2b6
SSDEEP

1536:MK4K4KVOqSs9Bh/sC4aICEhbDYdJLVkHGHyY+xypcrgrxO:MK4uOlq8CznE5DqJuAAxrrKk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Orcamento_e_Cotacao.exe

Files

1e1b48d3c8fce267bea03a25667116fd
.zip
Orcamento_e_Cotacao.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

NP

Sections

CODE
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ