General

  • Target

    02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO.zip

  • Size

    5.5MB

  • MD5

    cf7dc1a262de5723db3cb163bd3d8074

  • SHA1

    0822ab83c57e4f005ba63099245cbb321f3aa1b8

  • SHA256

    793c1207412cf6dcc05a36669d440f8758007473494c87255a6ad36b47656894

  • SHA512

    77ca5ef5ba86ce8f1a7c2fd5421198c05bcae685caa6ee97d2cff9c17cfa389c7633c7a418f44755467869c73ad1a338853a824cc74ab5f99ecf52c3884fa1db

  • SSDEEP

    98304:q6PLLXrGzp96y+SSeluWL+jmMQTFsamaLo4dsCQHozGNDSns9u3IHu4kStH2rBGK:VnXrGv6y+SAWs46cU4qczGNGsgIHpkZJ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO.zip
    .zip

    Password: 54GH4T

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/02 CITACION DEMANDA.exe
    .exe windows:5 windows x86 arch:x86

    Password: 54GH4T

    625b3ad2d833390d2a48864c0dc837df


    Code Sign

    Headers

    Imports

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/OperaSetup.exe
    .exe windows:5 windows x86 arch:x86

    Password: 54GH4T


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/aigret.eps
  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/barrette.accdb
  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/madbasic_.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 54GH4T

    ae5a6a29d3cea5a63ad958cfb1a5fb0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 54GH4T

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 54GH4T

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 54GH4T

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 54GH4T

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO/vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 54GH4T

    7f2e89ebd535b27c805b9455db0d7172


    Code Sign

    Headers

    Imports

    Exports

    Sections