Orden de Noviembre[.]com[.]exe | Triage

Sharing

General

Target

Orden de Noviembre.com.exe
Size

552KB
MD5

4940da1a6d964cc9090584fdb9ff306d
SHA1

e5be22aa824effd315eac3704dcc8790b0718dc0
SHA256

d8a9180da33ecaa39821ee77065c78cdf428a2c83afdbfa923e4db651b859961
SHA512

6febe5992c168273500e081967c648cef21b1f0c9cd0b11bfc16c9e1975fb5bae82cffb732a9baf6c5a38bb5adf5be814eb8ab75ce24be080092190c9d72bf91
SSDEEP

12288:ClxHRmQa1wEqTH+nsh1XMav+HaezctT4hZfmg:8HRmcH+meaWFzcts/fF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
Orden de Noviembre.com.exe

Files

Orden de Noviembre.com.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qUXc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ