d88e3a4ae134eb6f98490c72b24d8a54[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

d88e3a4ae134eb6f98490c72b24d8a54.zip
Size

882KB
MD5

d88e3a4ae134eb6f98490c72b24d8a54
SHA1

4409d8b8b0d7b6bc380d6770b2777de2bbe1afe4
SHA256

ce8303ed4e415196bbf250d5e833039ec49a7cd4fadd4ce48f479a3d9810378a
SHA512

164692039ecd871d2cf7553cf8fce87d4f37ac4778f6d9bd510ed3fda418736233f61c2a7f137610dac1024dcc0601f753cc9535edc335619d63ce84efe14fe5
SSDEEP

24576:eE9eVMVFJjR54qThd3QQ+Mz1yM8WjsNrXg6Mn81:eE4MN748dgVi1WWmrgdn81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2580-NOTIFICACIÓN PROCESO JURÍDICO; REF.74002-2024..exe

Files

d88e3a4ae134eb6f98490c72b24d8a54.zip
.zip

Password: 2580
2580-NOTIFICACIÓN PROCESO JURÍDICO; REF.74002-2024..exe
.exe windows:4 windows x86 arch:x86

Password: 2580

ed794b16380bcc81cb03fc61693c9d94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
CreateThread
TerminateThread
FindFirstFileW
FindClose
FormatMessageW
GetEnvironmentVariableW
GetComputerNameW
GetLocaleInfoW
Sleep
LocalFree
CreateMutexW
MulDiv
lstrcpynW
OutputDebugStringA
GetLocalTime
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
GetUserDefaultLangID
GetFileAttributesW
InitializeCriticalSection
DeleteCriticalSection
GlobalHandle
FreeResource
DeleteFileW
lstrcmpW
lstrcatW
CopyFileW
GetTempPathW
GetTimeZoneInformation
GetModuleFileNameW
GetModuleHandleW
GetCurrentThreadId
GetVersionExW
GlobalReAlloc
FindResourceW
LoadResource
LockResource
FreeLibrary
LoadLibraryW
GetProcAddress
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLastError
WriteFile
CreateFileW
GetFileSize
ReadFile
CloseHandle
OutputDebugStringW
lstrcmpiW
GlobalSize
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
EnterCriticalSection
LeaveCriticalSection
lstrlenW
GetCurrentProcess
FlushInstructionCache
lstrcpyW
InterlockedExchange

user32

GetWindowRect
IsWindowVisible
FindWindowExW
PtInRect
GetCursorPos
ScreenToClient
GetWindowTextW
GetDlgCtrlID
GetScrollPos
SetWindowTextW
GetKeyState
SetFocus
LoadCursorW
SendMessageW
RegisterClassExW
CreateWindowExW
LoadImageW
GetWindowLongW
GetSysColor
DefWindowProcW
CallWindowProcW
SetMenuItemInfoW
EndDialog
SystemParametersInfoW
CharNextW
EnumClipboardFormats
GetClipboardFormatNameW
GetClipboardData
MessageBoxW
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetWindowLongW
EnumChildWindows
CharLowerW
SetParent
CopyRect
DestroyWindow
PostQuitMessage
KillTimer
GetActiveWindow
SetTimer
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CreateDialogParamW
GetSystemMetrics
MapWindowPoints
GetSysColorBrush
ReleaseDC
GetDC
GetClientRect
GetDlgItem
LoadBitmapW
SetWindowPos
ShowWindow
IsDialogMessageW
GetParent
IsChild
GetFocus
TrackPopupMenuEx
DestroyMenu
GetWindow
CreateDialogIndirectParamW
GetClassInfoExW
RegisterWindowMessageW
GetWindowTextLengthW
EndPaint
FillRect
BeginPaint
IsWindow
RedrawWindow
GetClassNameW
GetDesktopWindow
CreateAcceleratorTableW
wsprintfW
LoadStringW
ReleaseCapture
GetIconInfo
SetCapture
DrawAnimatedRects
DestroyIcon
CopyImage
GetKeyboardState
MessageBoxA
DrawEdge
GetCapture
SetCursor
GetMessagePos
GetSubMenu
SetRectEmpty
GetWindowPlacement
RegisterHotKey
UnregisterHotKey
UnhookWindowsHookEx
SetDlgItemTextW
GetDlgItemTextW
EnableWindow
IsCharLowerW
SendMessageA
EnableMenuItem
CheckMenuItem
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetCaretPos
SetRect
SetForegroundWindow
SetActiveWindow
GetMenuItemRect
GetMenuItemCount
GetMenuState
GetMenuItemID
CreatePopupMenu
CharUpperW
keybd_event
MapVirtualKeyW
DialogBoxParamW
GetDlgItemInt
UpdateWindow
LoadIconW
LoadAcceleratorsW
EnumWindows
SendMessageTimeoutW
AppendMenuW
DrawFocusRect
InflateRect
IntersectRect
IsRectEmpty
ClientToScreen
MoveWindow
PostMessageW
SetWindowsHookExW
CallNextHookEx
GetWindowDC
GetMenuItemInfoW
OffsetRect
SetPropW
InvalidateRgn
DrawTextW
InvalidateRect
CreateIconIndirect

gdi32

LPtoDP
RestoreDC
LineTo
MoveToEx
CreatePen
SaveDC
DPtoLP
CreatePatternBrush
SetBitmapBits
GetBitmapBits
SetPixel
GetPixel
SetWindowOrgEx
GetBkColor
ExcludeClipRect
SetPixelV
GetTextExtentPoint32W
OffsetWindowOrgEx
GetClipBox
CreateSolidBrush
GetDeviceCaps
CreateDCW
CreateEnhMetaFileW
CloseEnhMetaFile
SelectPalette
RealizePalette
CreateCompatibleBitmap
GetCurrentObject
CreateBitmap
GetStockObject
SetBkMode
SetTextColor
GetDIBits
GetObjectW
CreateDIBSection
CreateCompatibleDC
SelectObject
SetBkColor
ExtTextOutW
CreateFontIndirectW
DeleteObject
BitBlt
DeleteDC
PatBlt

comdlg32

GetOpenFileNameW

advapi32

CryptAcquireContextW
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptGetHashParam
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
GetUserNameW
CryptCreateHash
OpenProcessToken
GetTokenInformation
RegOpenKeyExW

shell32

SHGetFileInfoW
SHAppBarMessage
Shell_NotifyIconW
SHGetDesktopFolder
ord25
ord155
SHGetMalloc
ExtractIconExW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW

ole32

RegisterDragDrop
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
OleLockRunning
CoTaskMemAlloc
DoDragDrop
CoTaskMemFree

oleaut32

VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringLen
SafeArrayDestroy
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysStringLen
LoadRegTypeLi
DispCallFunc
VariantClear
SysFreeString
SystemTimeToVariantTime

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Create
ImageList_Add
ImageList_Draw
ord17
ImageList_LoadImageW
InitCommonControlsEx
ImageList_DrawEx

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 2580

Password: 2580

ed794b16380bcc81cb03fc61693c9d94

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 233KB - Virtual size: 232KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 72KB - Virtual size: 242KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 233KB - Virtual size: 232KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 72KB - Virtual size: 242KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB