ParteDenuncia.rar
- SHA256 aa7d80daa488e8627316e1e24bef1a713ae4f86e4a6304c6784b6187ad0433d9
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ParteDenuncia.rar
Resource
win7-20240221-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ParteDenuncia.rar
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
ParteDenuncia.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
ParteDenuncia.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
11 signatures
150 seconds
General
- Target ParteDenuncia.rar
- Size 1.2MB
- Sample240517-ra5jvsbc35
- SHA256 aa7d80daa488e8627316e1e24bef1a713ae4f86e4a6304c6784b6187ad0433d9
- MD5 7b70fbc992152d753ec3d3df02dd8c8f
- SHA1 d3939990389c9c2b9309793d6d60b79734b515dc
- SHA512 c247df47cee3a9432eefb890a7afd355ece04e019fd4ada1bd9f5eed9099efe83494835467694fb4a164b4bcb9651f6c37a470e42d949d4233ff1e07b24064d5
- SSDEEP 24576:dUxAjJ5eWilajWpv0+fCpyjYq0AUeYHa6MGDrtfTh+j3udsUbzN:dbJ5eWLWp8EsyjWeYlrtfTzdJ9
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ParteDenuncia.exe
File Explorer
-
ParteDenuncia.rar.rar 1.2MB
-
ParteDenuncia.exe.exe 2.4MB
ParteDenuncia.exe
- IMPHASH 01c8b112a707a096b1dbec656d44285e
- SHA256 f98cb51b72234756df112ccfa9a412c20b313c26ef459b042a99a090a0ced8d8
- MD5 7e5490e5ee13eb6f567da9312a50ac4f
- SHA1 882e50b559806c13dbe9056262d2ec6b0ceaef94
- SHA512 fcc1f3b2a58baa5b6db8bc272533a423316d42c8ff7a1805374130ae97e66ccf1d830d9b4ef4039ae910970fa87b9752366a7aeccae27c9ac1c9dae47dc63bc9
- SSDEEP 24576:zYsfpxSOMSlpH06QWVqmDlH54jm+G7liuzp0nwTMe4iqtKmj1XL8tkfu3uCQLt+d:zYsfpxSelV9ZHHGv78WjDLaArkwXX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1964680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
HeapCreate
LoadLibraryA
GetProcAddress
GetModuleHandleA
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
gdi32
RestoreDC
GdiGetBatchLimit
SetBitmapDimensionEx
PolylineTo
StrokeAndFillPath
Arc
CopyMetaFileW
EnumFontFamiliesExW
EnumFontsW
GetDCPenColor
GetCharABCWidthsW
GetCurrentPositionEx
GetMapMode
GetObjectType
GetPolyFillMode
GetRasterizerCaps
GetViewportOrgEx
GetWindowExtEx
PolyPolyline
RemoveFontResourceW
SetDCBrushColor
SetBkMode
SetDIBits
SetMapMode
GetLayout
StretchBlt
SetTextAlign
UpdateColors
EnumEnhMetaFile
SetEnhMetaFileBits
CombineTransform
winspool.drv
SetPortW
ConfigurePortW
SetFormW
ConnectToPrinterDlg
SetPrinterDataW
EnumPrinterDataExW
EnumPrinterDataW
GetPrinterDataExW
GetPrinterDataW
GetJobW
GetFormW
version
VerInstallFileW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
237KB
Virtual Size
237KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
204KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=40, id=261, version=33218,
count=16, id=260, version=33218,
count=17, id=259, version=33218,
count=9, id=257, version=30795,
count=137, id=1, productName=Unmarked objects,
count=1, id=259, version=33133,
count=2, productName=Unmarked objects (old),
count=1, id=261, version=33523,
count=1, id=255, version=33523,
count=1, id=258, version=33523,