Remesas Aceptadas[.]PDF[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Remesas Aceptadas.PDF.exe
Size 495KB
Sample240909-nmrxravgpj
SHA256 9f3b919ce19ec77455cf976bca1489292959e2032e7498c3daa6099b2ea90d8c
MD5 d6ff66eeba266a3eda5af0c40d6a5deb
SHA1 ebcb218d12b52e4567046e7c73bfba896b1fa09a
SHA512 3b87e4dc73ec79253361da82a531fd7da75e23afae7792e31e7b014339994d30d91372d6795f692e5e6e5256ca51204c87af1938533fddba596eb814c68f87c9
SSDEEP 12288:IIFypJoDAP2wEve+g3c9kP9/kVTtFwP0nRUw:DMpqAP2Nve+g3cheP0Ww
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Remesas Aceptadas.PDF.exe

File Explorer

Remesas Aceptadas.PDF.exe

.exe 495KB
Complementarily.Nin

293KB
Eguns/Aliyahs50.Fum83

53KB
Eguns/Humanisation.gul

33KB
Eguns/Regionplanlgning157.med

255KB
Eguns/bermudian.eks

134KB

Remesas Aceptadas.PDF.exe

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 9f3b919ce19ec77455cf976bca1489292959e2032e7498c3daa6099b2ea90d8c
MD5 d6ff66eeba266a3eda5af0c40d6a5deb
SHA1 ebcb218d12b52e4567046e7c73bfba896b1fa09a
SHA512 3b87e4dc73ec79253361da82a531fd7da75e23afae7792e31e7b014339994d30d91372d6795f692e5e6e5256ca51204c87af1938533fddba596eb814c68f87c9
SSDEEP 12288:IIFypJoDAP2wEve+g3c9kP9/kVTtFwP0nRUw:DMpqAP2Nve+g3cheP0Ww
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

Remesas Aceptadas.PDF.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

Complementarily.Nin

Eguns/Aliyahs50.Fum83

Eguns/Humanisation.gul

Eguns/Regionplanlgning157.med

Eguns/bermudian.eks