NUEVO-RECIBO_94813[.]cpl

Sharing

Copy URL Twitter E-mail

General

Target
NUEVO-RECIBO_94813.cpl
Size 32.2MB
Sample260722-qlft7swbkd
SHA256 461dc22f424bdaf195a0285e2c302858c517e067ef3dc560406157dde68a890b
MD5 67ada28d9e1e03ef911ae7f7e37094e5
SHA1 b942fc748a987ad786077e58b1319255c470b8c2
SHA512 2919d515fce60f4f3892f1414b05a3d70e14c88506c80a1f74a4c21873fe8e45c23f5cbf1601361a7fee91594ddeeda63576ea80173e7afed961174b240d4935
SSDEEP 98304:iazvp1idPRIILf+6IU/UwNiCxeYGuuEkChSgW3V0ZCZ1VufQ:R90PR3LfyfkeYGuLkChYV0cZX
TLSH
T1DB773503706CA1B1E2F5883599261F47E1F4F42713708E8373A689B45FBAE92767F4A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NUEVO-RECIBO_94813.cpl

File Explorer

NUEVO-RECIBO_94813.cpl

.dll 32.2MB

NUEVO-RECIBO_94813.cpl

IMPHASH 2010634bb10feb46ccca73989370d2cb
SHA256 461dc22f424bdaf195a0285e2c302858c517e067ef3dc560406157dde68a890b
MD5 67ada28d9e1e03ef911ae7f7e37094e5
SHA1 b942fc748a987ad786077e58b1319255c470b8c2
SHA512 2919d515fce60f4f3892f1414b05a3d70e14c88506c80a1f74a4c21873fe8e45c23f5cbf1601361a7fee91594ddeeda63576ea80173e7afed961174b240d4935
SSDEEP 98304:iazvp1idPRIILf+6IU/UwNiCxeYGuuEkChSgW3V0ZCZ1VufQ:R90PR3LfyfkeYGuLkChYV0cZX
TLSH
T1DB773503706CA1B1E2F5883599261F47E1F4F42713708E8373A689B45FBAE92767F4A4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

AddVectoredContinueHandler AddVectoredExceptionHandler CloseHandle CreateEventA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentThreadId GetEnvironmentStringsW GetErrorMode GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetThreadContext InitializeCriticalSection LeaveCriticalSection LoadLibraryExW PostQueuedCompletionStatus QueryPerformanceCounter RaiseFailFastException ResumeThread RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetWaitableTimer Sleep SuspendThread SwitchToThread TlsAlloc TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WerGetFlags WerSetFlags WriteConsoleW WriteFile

api-ms-win-crt-heap-l1-1-0

calloc free malloc

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _exit _initialize_onexit_table _initterm _initterm_e _register_onexit_function abort

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf fwrite

api-ms-win-crt-string-l1-1-0

strlen strncmp

Name

.text

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

804KB

Virtual Size

803KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

636B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

32.3MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

69B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

NUEVO-RECIBO_94813.cpl

kernel32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

generic