20220829_PEDIDO_22073M_PROTECO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20220829_PEDIDO_22073M_PROTECO.exe
Size

645KB
MD5

ccd2f694d9142139aa8a0a268682800b
SHA1

99adb887080336164ea80d1a57418f535b08ffba
SHA256

ff8a33f612d8a5b395c770106457287d423b9b637e1e900e21da789bcfffd761
SHA512

5d946b0fcdc9e40ef34e50f4ca48c94359c6a27a561d9c67385370eec87017330cf64dc3a84903e574a4044204f70898e83852b229a08f812e61818da75a9c52
SSDEEP

12288:6agX6X60ABJKVgDRUCVmjWkfWvvgEkGVrGxIL5qYMc:6ag/BJtD/glf6gNGBGx4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20220829_PEDIDO_22073M_PROTECO.exe

Files

20220829_PEDIDO_22073M_PROTECO.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 643KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ