recuva_professional__technician_(2024)_full_español_[mega][.]7z

General

Target
recuva_professional__technician_(2024)_full_español_[mega].7z
Size 3.8MB
Sample260429-tvsf5sdw4y
SHA256 42b429f4be7b62dfc318c0bd3d6b11e03633cba9e9affcb83357d2721b9063fb
MD5 0c521271abb39e07fff998af280fa8fb
SHA1 86feaf982bbec2b783726143b5b8ed54eebddadb
SHA512 0c8d9561bf7bca856c2b6c66c4282bf30a3bfdd67dcfb4073596711a08e934be64b98372632c944386b2aba2c3d09d6cf1e29953693467fed1e4b91f1996515d
SSDEEP 98304:tAkEe52Hjdfq3fs9tGhY3dNAubU6ybzAlez2coM:t442Hj52fsrGq3XAuQ6y32cR
TLSH
T14F0633244D74B2B28930D294773BB96F93C4EF6BE73207A8B4072D8F213509D66968DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/recuva_professional__technician_(2024)_full_español_[mega].exe

File Explorer

recuva_professional__technician_(2024)_full_español_[mega].7z

.7z 3.8MB
recuva_professional__technician_(2024)_full_español_[mega].exe

.exe 770.2MB

recuva_professional__technician_(2024)_full_español_[mega].7z

SHA256 42b429f4be7b62dfc318c0bd3d6b11e03633cba9e9affcb83357d2721b9063fb
MD5 0c521271abb39e07fff998af280fa8fb
SHA1 86feaf982bbec2b783726143b5b8ed54eebddadb
SHA512 0c8d9561bf7bca856c2b6c66c4282bf30a3bfdd67dcfb4073596711a08e934be64b98372632c944386b2aba2c3d09d6cf1e29953693467fed1e4b91f1996515d
SSDEEP 98304:tAkEe52Hjdfq3fs9tGhY3dNAubU6ybzAlez2coM:t442Hj52fsrGq3XAuQ6y32cR
TLSH
T14F0633244D74B2B28930D294773BB96F93C4EF6BE73207A8B4072D8F213509D66968DD
MD5 SHA1 SHA512 SSDEEP TLSH

Password

7043

recuva_professional__technician_(2024)_full_español_[mega].exe

IMPHASH 5af915f278815e76bad476ef32593028
SHA256 6438b20c7daa5840251216006275b6a19034a7c7542585549d9a3beeb0797de9
MD5 ba4c76da5f1c55c4aceb6db449f0ff44
SHA1 c8d6f78f2f0aade59816c41f480415b4c77f23c3
SHA512 4aef8569fa50c156238e82577059d69150e78d5fd3b3880731c19b3dbf05b642f1a5f3d7c86c68b7e3ca8094248b21fb0b92b012ae3a427ad8350de3e60064db
SSDEEP 49152:12zoh9JSqXfKyKHJvnoE7okxlEJWMAvNZ7QdVfIXEbXoEoxl8z/ZgihQ0cpmWVgF:12zoh9kAGnoE73y6Qbbdo8vDBnYX3sx
TLSH
T1F989BE40B7E50062E1A7273095B6A267AB32BC150F35C7DF46A0B9AD3E777C09D32726
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

7043

Minor OS version

1

Major OS version

6

Entry point

486608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

975KB

Virtual Size

975KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1010KB

Virtual Size

1010KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

109KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

recuva_professional__technician_(2024)_full_español_[mega].7z

recuva_professional__technician_(2024)_full_español_[mega].exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

recuva_professional__technician_(2024)_full_español_[mega].7z

recuva_professional__technician_(2024)_full_español_[mega].exe

kernel32

generic