4f41ea2c698613acfaabcd0f1890053dca987f99011710c49bba1edd16584f75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f41ea2c698613acfaabcd0f1890053dca987f99011710c49bba1edd16584f75
Size

694KB
MD5

dc669e31f20131716b65096dc8003516
SHA1

71c0b98fd67b0cc82b452db026d81a04d7f6de1a
SHA256

4f41ea2c698613acfaabcd0f1890053dca987f99011710c49bba1edd16584f75
SHA512

8fc52314fff00116cd253c5dbf1621948dec930b29b8ed613807a5aad38967fe7b334589ccf1077a181f97ba78152e7becd1045b347c5e3962255fbf82b84de8
SSDEEP

12288:XtiW6iJjCcXvLTxOepVnE8Znu50hFe/qShWcPE7QrzRuM5Anm/DiJ3I:MitCcXvxjpVE83h2tqezRugh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Transferencia.exe

Files

4f41ea2c698613acfaabcd0f1890053dca987f99011710c49bba1edd16584f75
.zip
Transferencia.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

gzoY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ