1d0c839f62d4bba569a80e880014eb6a8613ffc954c86e52a3312ea2ddd65813

Sharing

Copy URL

Twitter E-mail

General

Target

1d0c839f62d4bba569a80e880014eb6a8613ffc954c86e52a3312ea2ddd65813
Size

1.4MB
MD5

8cf11afafd91e4d7ac6eea72b019dfed
SHA1

3a15556aa6e658fe1c29261de233b294d7c80203
SHA256

1d0c839f62d4bba569a80e880014eb6a8613ffc954c86e52a3312ea2ddd65813
SHA512

59f630f0ec55eeb302ab26ac49c31a036b8152b3cbcb8ad358d7ed0a2af945a1aae81203e2b63eea7e79d1f6b2c2503adad2c31cc369a85a99e26c848f9fd725
SSDEEP

24576:Ae/k8isyqMN0BUw9MxP8wtBMLB0bSRP/UsZgUX8c/dbgLtdZp/VllpZhCIkA5l/t:Ap8irS19WPtBucSxcEtdkLtdpllpGnxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Portaflio Prioritario - Informe de Robo 21 de Octubre/Consolidado Prioritario - Informe de Robo 21 de Octubre.exe
unpack001/Portaflio Prioritario - Informe de Robo 21 de Octubre/Doc 030435993940034 - Informe de Robo 21 de Octubre.exe

Files

1d0c839f62d4bba569a80e880014eb6a8613ffc954c86e52a3312ea2ddd65813
.rar

Password: 09234
Portaflio Prioritario - Informe de Robo 21 de Octubre/Consolidado Prioritario - Informe de Robo 21 de Octubre.exe
.exe windows:4 windows x86 arch:x86

Password: 09234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Portaflio Prioritario - Informe de Robo 21 de Octubre/Doc 030435993940034 - Informe de Robo 21 de Octubre.exe
.exe windows:5 windows x86 arch:x86

Password: 09234

92123d4a3b04ca0b3359b64c690e6528

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetProcessImageFileNameA
GetModuleFileNameExA
EnumProcessModules
EnumProcesses

comctl32

PropertySheetA
ord6
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ord17

winmm

PlaySoundA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

iphlpapi

GetAdaptersInfo

kernel32

SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
WaitForSingleObject
InterlockedCompareExchange
UnlockFile
LockFile
OutputDebugStringW
GetTickCount
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
Sleep
FormatMessageW
GetVersionExW
HeapDestroy
LeaveCriticalSection
GetFileAttributesA
HeapCreate
HeapValidate
GetFileAttributesW
ReadFile
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
GetVersionExA
CloseHandle
DeleteFileW
GetCurrentProcessId
GetTempPathA
LocalFree
GetSystemTime
AreFileApisANSI
DeleteFileA
GetLocalTime
lstrcpyA
OpenProcess
MoveFileExA
GetFileSize
FileTimeToSystemTime
GetSystemDirectoryA
GetTimeZoneInformation
GetEnvironmentVariableA
GetShortPathNameA
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
WritePrivateProfileStringA
GetModuleFileNameA
GetFileTime
FileTimeToLocalFileTime
GetExitCodeProcess
TerminateProcess
MoveFileA
GetProfileStringA
lstrcmpA
HeapCompact
lstrcatA
GetPrivateProfileStringA
CreateProcessA
GetModuleHandleA
ExpandEnvironmentStringsA
WriteProfileStringA
SearchPathA
lstrcmpiA
CompareStringA
IsProcessorFeaturePresent
RtlUnwind
LCMapStringW
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
EncodePointer
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetDateFormatA
GetTimeFormatA
CreateThread
GetCurrentThreadId
ExitThread
DecodePointer
ExitProcess
GetModuleHandleW
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
_lread
FindNextFileA
FindClose
GlobalFree
CopyFileA
FindFirstFileA
GlobalUnlock
GlobalAlloc
WriteFile
GetWindowsDirectoryA
_lclose
GlobalLock
SetErrorMode
OpenFile
WinExec
lstrlenA
GlobalMemoryStatus
CreateMutexW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
SetStdHandle
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
QueryDosDeviceA

user32

GetWindowLongA
SystemParametersInfoA
GetMessageA
PostQuitMessage
SetWindowLongA
TranslateMessage
CreateWindowExA
DefWindowProcA
DispatchMessageA
RegisterClassA
DestroyWindow
ChildWindowFromPoint
GetClientRect
IsWindowEnabled
GetPropA
DrawTextA
GetWindowThreadProcessId
LoadBitmapA
FindWindowA
GetDlgItem
SendMessageA
LoadCursorA
wsprintfA
SetCursor
SetDlgItemTextA
GetDlgItemInt
SetTimer
GetWindowRect
MapDialogRect
SendDlgItemMessageA
KillTimer
GetParent
LoadIconA
RemovePropA
FindWindowExA
SetFocus
GetDC
SetPropA
TrackPopupMenuEx
MessageBoxA
BringWindowToTop
ReleaseDC
GetDesktopWindow
SetWindowPos
GetCursorPos
CreatePopupMenu
AppendMenuA
PostMessageA
SetMenuDefaultItem
DeferWindowPos
LoadImageA
UpdateWindow
EnableWindow
CallWindowProcA
GetDlgItemTextA
DestroyIcon
EndDeferWindowPos
GetSystemMetrics
InvalidateRect
GetClassNameA
SetForegroundWindow
LoadStringA
GetWindowTextA
ShowWindow
IsWindow
CharUpperBuffA
EndDialog
SetWindowTextA
DialogBoxParamA
MessageBoxExA
BeginDeferWindowPos

gdi32

SetBkMode
SelectObject
CreateFontA
GetStockObject
GetDeviceCaps
SetTextColor

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegOpenKeyA
CryptCreateHash
RegQueryValueA
CryptAcquireContextA
CryptReleaseContext
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
GetServiceKeyNameA
GetServiceDisplayNameA
QueryServiceStatusEx
CryptDestroyHash
CryptHashData
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
GetUserNameA
OpenServiceA
CloseServiceHandle
StartServiceA
QueryServiceStatus
OpenSCManagerA
ControlService
CryptGetHashParam

shell32

ExtractIconA
SHGetFileInfoA
SHFileOperationA
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderPathA
SHGetFolderPathA

ole32

CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear

Sections

.text
Size: 891KB - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 09234

Password: 09234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 16KB - Virtual size: 15KB

.rsrc Size: 113KB - Virtual size: 113KB

.reloc Size: 512B - Virtual size: 12B

Password: 09234

92123d4a3b04ca0b3359b64c690e6528

Headers

DLL Characteristics

File Characteristics

Imports

psapi

comctl32

winmm

version

wininet

iphlpapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 891KB - Virtual size: 892KB

.rdata Size: 90KB - Virtual size: 92KB

.data Size: 14KB - Virtual size: 72KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.text
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 113KB - Virtual size: 113KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 891KB - Virtual size: 892KB

.rdata
Size: 90KB - Virtual size: 92KB

.data
Size: 14KB - Virtual size: 72KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB