14022025_0153_13022025_Nueva Orden de Compra[.]rar | Triage

Sharing

General

Target

14022025_0153_13022025_Nueva Orden de Compra.rar
Size

872KB
MD5

64f0d5fc2c33a9eee319b83cf94ea3b9
SHA1

0d4ac24647c8b0d9e15644ab51efcfc27ba74616
SHA256

6a35201b5275aa3f2da2f383dd290a839a3e0eebb596d93dfab5a1c9a5b26728
SHA512

423fc3ce2eecf225e4d19f123e3dd15dc9d4b8f2075c1012014340062ec0b8fb8b667489cc2fba627574b99edcf034a46b0896972048b7a1961de447591daac6
SSDEEP

12288:5i8TJ7Fq06JDOYrle3znecMMMDU8NZ2N13As6J780G1mwhYVs2t6XNX6hRy7+7Q0:5HrCtOZzne2F8f2/AdJ40Ge220XgHIO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nueva Orden de Compra.exe

Files

14022025_0153_13022025_Nueva Orden de Compra.rar
.rar

Password: infected
Nueva Orden de Compra.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 893KB - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ