recuva_professional__technician_(2024)_full_español_[mega][.]7z

General

Target
recuva_professional__technician_(2024)_full_español_[mega].7z
Size 3.2MB
Sample260331-phancaav3m
SHA256 28085d995e1b9a8bde3e2eb61c23accd28be7ba3dc99c4397508a7824e5d358a
MD5 b35c3d02f0849db58454359ead4b6755
SHA1 3c163d61af23f472d114fdbfb2c4d3a2ddef6d76
SHA512 6b823a8a58f581964388b387860ba2d41e0475e3e284a353d19d6195a8b3cd96b8a837b433da099c39010b6b9c8d2d01d05852c5d55e9dff9c1293bec5d7e1d5
SSDEEP 98304:3e/mSuTEda5siG7H4zp3nghHBL0yQM8QOhFKFMJ:uluIc5sP7H2WL0yQlQqFF
TLSH
T114F53300A28145EC59D727C28739168FD7A7F0FA84FBEFF8272AF921A05955CD06B44E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/recuva_professional__technician_(2024)_full_español_[mega].exe

File Explorer

recuva_professional__technician_(2024)_full_español_[mega].7z

.7z 3.2MB
recuva_professional__technician_(2024)_full_español_[mega].exe

.exe 861.5MB

recuva_professional__technician_(2024)_full_español_[mega].7z

SHA256 28085d995e1b9a8bde3e2eb61c23accd28be7ba3dc99c4397508a7824e5d358a
MD5 b35c3d02f0849db58454359ead4b6755
SHA1 3c163d61af23f472d114fdbfb2c4d3a2ddef6d76
SHA512 6b823a8a58f581964388b387860ba2d41e0475e3e284a353d19d6195a8b3cd96b8a837b433da099c39010b6b9c8d2d01d05852c5d55e9dff9c1293bec5d7e1d5
SSDEEP 98304:3e/mSuTEda5siG7H4zp3nghHBL0yQM8QOhFKFMJ:uluIc5sP7H2WL0yQlQqFF
TLSH
T114F53300A28145EC59D727C28739168FD7A7F0FA84FBEFF8272AF921A05955CD06B44E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

8413

recuva_professional__technician_(2024)_full_español_[mega].exe

IMPHASH 1aae8bf580c846f39c71c05898e57e88
SHA256 4cb62341a6927d2275a5291d1c7ad50cd0e6df850fd382d076bc469381a96e29
MD5 b97ca6334f704951c92b9056f75e0b43
SHA1 22816d771d1eae99483726b173f516a462977c12
SHA512 597429a496cec12a6021c985ee2ec0773c9ecb2419d6078efe3b96f401db46ff5e9eb36eba54625db0a64e3b78d09b502565394114ada36fac55a3a99070ca05
SSDEEP 196608:twbiVwpwj2ZPNkVCUWcnYsBblbjjx+1tQkw:2biV+ZPO6cnZfbjjx+vF
TLSH
T1DF99AD12BBD980B6E477423489BB53AAE335BC150B3196CF6200BA7D6F777D10936722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

8413

Minor OS version

1

Major OS version

6

Entry point

421824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

445KB

Virtual Size

445KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

852KB

Virtual Size

851KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

129KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

recuva_professional__technician_(2024)_full_español_[mega].7z

recuva_professional__technician_(2024)_full_español_[mega].exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

recuva_professional__technician_(2024)_full_español_[mega].7z

recuva_professional__technician_(2024)_full_español_[mega].exe

kernel32

generic