20220829_PEDIDO_22073M_PROTECO[.]rar | Triage

Resubmissions

19/01/2024, 18:35

240119-w8sp6sbedn 10

19/01/2024, 18:27

240119-w3929sbdej 10

Sharing

Copy URL Twitter E-mail

General

Target

20220829_PEDIDO_22073M_PROTECO.rar
Size

618KB
MD5

4925309123e99ecaede5349717656d57
SHA1

0114fb706cf1dc535074634bb73ea480eebfbba7
SHA256

779d495dd021fc909b4ab4bdc6bbdf8188e7e374ce4ba1da1c14fb0420b7520b
SHA512

1e38c3bc3704190ecb45d6f0e8047ff09139b07092c5a484d237035fc8cc990a942307697a06550c388521c9b20e02e4aa8d2d79b3f0798e9ab93be9cf8134fa
SSDEEP

12288:/XqutJkMs01l33ueKVc+zjKPQrtwKKYyC3w9T9VP1m:/hkyv33ue+cWrQYVYpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/20220829_PEDIDO_22073M_PROTECO.exe

Files

20220829_PEDIDO_22073M_PROTECO.rar
.rar
20220829_PEDIDO_22073M_PROTECO.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 811KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ