wwwramajudicialgovcoproceso000000700940300540[.]LHA | Triage

Sharing

General

Target

wwwramajudicialgovcoproceso000000700940300540.LHA
Size

737KB
MD5

6c95a8dd2fbe75959cc88cb4bef93f5e
SHA1

1ecf5995789f58687ce477118521d2d72dcbeb54
SHA256

3770792a40acb10bd5eefeaf0400f044f0e4b38f21bf339789e9a05f8b5fb358
SHA512

adfebe35ba987fcebdc92caec1934901d59e72cde08ccc4ccaf480a54666219dd126b94c5dfbd0bfd69f203952f4ae41391f26b5fb77b7ddf38f113f1e56ab32
SSDEEP

12288:PodUTTv301b1plIHUbb8NxuvKG7ZDd5IuUxg8AsUzgSgM4P+tbAtLyXbKH:xTv30/9OsSG7ZxOVUz235xH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/wwwramajudicialgovcoproceso000000700940300540.exe

Files

wwwramajudicialgovcoproceso000000700940300540.LHA
.zip

Password: 2024
wwwramajudicialgovcoproceso000000700940300540.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ