9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37

General

Target
9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37
Size 8.5MB
Sample240611-me3tlstfpm
SHA256 9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37
MD5 9c9cfe61f7fdcca5cfe91dccf40543f1
SHA1 c1453fd86c62282df4271b65db9ead7a663b8283
SHA512 e6f77e9c61c80fec9fe23346b4529cfaaae595ae26c4831a7263518aff651c6b1334a40c76216787c45a04f14a426b158b08f02630bcbbbab75537e7b6260bdc
SSDEEP 196608:2t9/JlU20t/2Jq7XGyNUigB0q512sNxUhR/Egg5855NNdxnXLoT:2T82W2A7XbLVq51QR/npHpxI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Carpeta Usuarios/Remoto1/Desktop/Facturas/deep.exe

File Explorer

9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37

.zip 8.5MB
Virus Crypt/3124d0dc-7cc0-4053-81f3-3b11bd0e430a.zip

.zip 4.3MB
Carpeta Usuarios/Remoto1/Desktop/Facturas/deep.exe

.exe 4.5MB
ProgramData/McAfee/QuarMeta/3124d0dc-7cc0-4053-81f3-3b11bd0e430a

.xml 6KB

9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37

SHA256 9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37
MD5 9c9cfe61f7fdcca5cfe91dccf40543f1
SHA1 c1453fd86c62282df4271b65db9ead7a663b8283
SHA512 e6f77e9c61c80fec9fe23346b4529cfaaae595ae26c4831a7263518aff651c6b1334a40c76216787c45a04f14a426b158b08f02630bcbbbab75537e7b6260bdc
SSDEEP 196608:2t9/JlU20t/2Jq7XGyNUigB0q512sNxUhR/Egg5855NNdxnXLoT:2T82W2A7XbLVq51QR/npHpxI
MD5 SHA1 SHA512 SSDEEP

Carpeta Usuarios/Remoto1/Desktop/Facturas/deep.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 9e54b2b929422550c4b0c48e7423a2796bb3c2c43ff5f1ff4e6ea1ca4e6655bb
MD5 8a8c17f96add3a38d3c87ebe440bdf52
SHA1 b5319a7c0fdf72c160e9b4424fc830115c9e86e5
SHA512 9b349902d13bfc41c7a98e15e13bb76eff5633f0331c8e1b49a8e914c0e714f1bd034ac9a962f6229e8912af88ad08ebc8317e0a83769d0b1e3dc781b530a2ca
SSDEEP 98304:Wneb4JF4qJBDdeShKLLrQANNTaTdVSOi9kWWarcX:SF4EDdeSULTNNOTK5WarcX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7479296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

Size

138KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

feemnvdm

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

iccgbqzr

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37

Virus Crypt/3124d0dc-7cc0-4053-81f3-3b11bd0e430a.zip

Carpeta Usuarios/Remoto1/Desktop/Facturas/deep.exe

kernel32

generic

ProgramData/McAfee/QuarMeta/3124d0dc-7cc0-4053-81f3-3b11bd0e430a

Sharing

General

Malware Config

Signatures

File Explorer

9d93dbab4597be6046d7feab9cc8076cba6ac85625cd1e661d61578a3b6f2f37

Virus Crypt/3124d0dc-7cc0-4053-81f3-3b11bd0e430a.zip

Carpeta Usuarios/Remoto1/Desktop/Facturas/deep.exe

kernel32

generic

ProgramData/McAfee/QuarMeta/3124d0dc-7cc0-4053-81f3-3b11bd0e430a