1207a6877eb59d0f4a8589c6c20c1991eee7caa9cc902cc952de89fa772f2747 | Triage

Sharing

General

Target

1207a6877eb59d0f4a8589c6c20c1991eee7caa9cc902cc952de89fa772f2747
Size

687KB
MD5

06a34df51f858fa1bf9694a83395fe3f
SHA1

a1011a03230e9514cb491858a140056854098420
SHA256

1207a6877eb59d0f4a8589c6c20c1991eee7caa9cc902cc952de89fa772f2747
SHA512

79ed73b5e6fd2ac6a6ef52aa3055cafda5d3d22e80daa04769299880dc03919effcab606a70281e6dae7d21633014014355149869dbf1e373939cdf5e0b93623
SSDEEP

12288:uD5e9fCHPwZ3pSi1wqFF6U8xqedDPTjK518V4B0wPU+67x9ohxva/4U9dNLdY3X:WZvu3M0wiFisGa8Vtl7xejva/4U9fRYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HMFZ0772 [Pedido].exe

Files

1207a6877eb59d0f4a8589c6c20c1991eee7caa9cc902cc952de89fa772f2747
.zip
HMFZ0772 [Pedido].exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ERhf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 805KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ