Camscanner Notificacion demanda judicial 19-11-2024[.]uue

General

Target

Camscanner Notificacion demanda judicial 19-11-2024.uue
Size

936KB
MD5

72ca8b45de97bee7b71f8d785a71a54a
SHA1

b7358ebf2ad5c25137cb6c7be0ad4ec37890fa6b
SHA256

dd463e0aeafb0bc71503292b29b554024c4eca5b630ae9da90f4eb1e20cddc79
SHA512

32de6ce467f218e1f7b6f1aec4bb0cedb8f79084e40240f08e4367f24174982e17c536e0b0f95ed3c047ecd03fc052913a799eab4193baf89dbf264ab191646a
SSDEEP

12288:JrpTt9wztuwr7fX1VH9lBAUqBLq9S2Lgtjlzz+7Nm0R1rCnOUZlzzp3znAU:JFTXSuEX1VdAe9Shtjlz6FR1R099znAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Camscanner Notificacion demanda judicial 19-11-2024.exe

Files

Camscanner Notificacion demanda judicial 19-11-2024.uue
.rar

Password: 4114
Camscanner Notificacion demanda judicial 19-11-2024.exe
.exe windows:4 windows x86 arch:x86

Password: 4114

1f8e41fb9e36087e69ff9db63d105d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfoW
ExtractIconExW
SHGetFolderPathW
ShellExecuteExW
ord727

user32

DestroyIcon
UnregisterHotKey
RegisterHotKey
GetKeyState
keybd_event
SetWindowsHookExW
GetAsyncKeyState
CallNextHookEx
RegisterWindowMessageW
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetLastActivePopup
SetForegroundWindow
UnhookWindowsHookEx

gdi32

DeleteObject

ole32

CoInitialize
CoUninitialize

advapi32

OpenProcessToken

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

netapi32

NetServerEnum
NetApiBufferFree

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateProcess
IsDebuggerPresent
GetCurrentThreadId
GetLastError
CreateMutexW
CloseHandle
ExpandEnvironmentStringsW
GetModuleFileNameW
VirtualQuery
SetLastError
GetProcAddress
UnhandledExceptionFilter
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleW
GetCommandLineW
GetVolumeInformationW
GetCurrentProcess

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 596KB - Virtual size: 594KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 4114

Password: 4114

1f8e41fb9e36087e69ff9db63d105d7b

Headers

File Characteristics

Imports

shell32

user32

gdi32

ole32

advapi32

userenv

netapi32

kernel32

Sections

.text Size: 196KB - Virtual size: 193KB

.rdata Size: 136KB - Virtual size: 134KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 596KB - Virtual size: 594KB

.text
Size: 196KB - Virtual size: 193KB

.rdata
Size: 136KB - Virtual size: 134KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 596KB - Virtual size: 594KB