045ce8590373cbeb98f04c768e325ba6435f5f7ca5f86e027781e869647fa296 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

045ce8590373cbeb98f04c768e325ba6435f5f7ca5f86e027781e869647fa296
Size

1.2MB
MD5

4ba0f9bcc14a93d3939c86cb5ed87b5d
SHA1

aeb4c8d6f5d2a57b9cb1dc0b8718ef6f95e55ca9
SHA256

045ce8590373cbeb98f04c768e325ba6435f5f7ca5f86e027781e869647fa296
SHA512

ebe73627a7da4806d7c3ec7da7331ebd81aed6077828d92ee543e189bca5b4a956de7514fb1b3fb9735577932e0eef3c3c7433f160407dadb093812643b372b7
SSDEEP

12288:zwE6BhjR3AYR/p2Z4dHWSUSYeCuv2ZwsSZgkPZ31TDf/rhMLv2p5:kFBhjiYR/p9HWmYC27SZtPZ3NDf/dMI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/pedido 24-NARC-00248.exe

Files

045ce8590373cbeb98f04c768e325ba6435f5f7ca5f86e027781e869647fa296
.iso
out.iso
.iso
pedido 24-NARC-00248.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ