recuva_professional__technician_(2026)_full_español_[mega][.]7z

General

Target
recuva_professional__technician_(2026)_full_español_[mega].7z
Size 3.9MB
Sample260825-w96y7adn41
SHA256 f2049b7b8b9677fe80a01eb65c3b014e453ba53ce53b031899e70e5aafdedd23
MD5 95406f3792725050696257242a3dc63b
SHA1 981c406c5413977aad967be9b7056f625412d273
SHA512 96a0b432da6aebb13c1373d41b95afdcafbf359f7d2c31fc8ff480d7ffac5011cced0fa9cbcf25c371a863b8bd7d14d5eb7010e8ac4e9e36bd07f23d1410c3c8
SSDEEP 98304:nhBLmBhcgxPrvkXNsJR13PucNgBSd54ogR7mTQy1Jzt0+L:nhZScgx76WR1gUd54o4mTQy36k
TLSH
T17716333AD06ED4CA1B3A68203994CB3E2316D95BC62D5847DA0CE1EDDF4F8D363B5252
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/recuva_professional__technician_(2026)_full_español_[mega].exe

File Explorer

recuva_professional__technician_(2026)_full_español_[mega].7z

.7z 3.9MB
recuva_professional__technician_(2026)_full_español_[mega].exe

.exe 788.3MB

recuva_professional__technician_(2026)_full_español_[mega].7z

SHA256 f2049b7b8b9677fe80a01eb65c3b014e453ba53ce53b031899e70e5aafdedd23
MD5 95406f3792725050696257242a3dc63b
SHA1 981c406c5413977aad967be9b7056f625412d273
SHA512 96a0b432da6aebb13c1373d41b95afdcafbf359f7d2c31fc8ff480d7ffac5011cced0fa9cbcf25c371a863b8bd7d14d5eb7010e8ac4e9e36bd07f23d1410c3c8
SSDEEP 98304:nhBLmBhcgxPrvkXNsJR13PucNgBSd54ogR7mTQy1Jzt0+L:nhZScgx76WR1gUd54o4mTQy36k
TLSH
T17716333AD06ED4CA1B3A68203994CB3E2316D95BC62D5847DA0CE1EDDF4F8D363B5252
MD5 SHA1 SHA512 SSDEEP TLSH

Password

2805

recuva_professional__technician_(2026)_full_español_[mega].exe

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 1d3a647df8e290ffd3a1c76df083e92b2fd234822d516e7a01b51f65dfef126c
MD5 8c6b188a9a0bcee6ed91ce629f9d09ab
SHA1 f94941c6a0f94ee9431bd2f3e17b05343ee3d854
SHA512 e3e8c98093379f556ce4cae685fa2a0ffe1985dfddec68b94bb4e091720b19db0c846ab721c2082bfd095cdfcb06728b0045980b7474515af3e2d9ad4187dcc7
SSDEEP 196608:ZmoNvykbwBkDZEdqzf3AsMZ/oFDYccFc6JG:HNvykb4gPfMZ/oFDYccFw
TLSH
T140899F037AD891A1D1AA4634D57A9123BB31BCA48730A7EF2B40F6791F337C15E35B26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

2805

Minor OS version

1

Major OS version

6

Entry point

393600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

95KB

Virtual Size

454KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

recuva_professional__technician_(2026)_full_español_[mega].7z

recuva_professional__technician_(2026)_full_español_[mega].exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

recuva_professional__technician_(2026)_full_español_[mega].7z

recuva_professional__technician_(2026)_full_español_[mega].exe

kernel32

generic