home

diciembre15.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from siana.telmex.com.
MD5:
34fad37984db0a895f8ed192844706f3

SHA-1:
02490f7644a1641a60210af7e2de266f6b411224

SHA-256:
0db93cfd0548de59357f4ece3373f1561229ec323358bda139ce54d8140430a9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2025 11:47:43 PM UTC  (a few moments ago)

File size:
83 KB (84,995 bytes)

File type:
Executable application (Win16 EXE)

File PE Metadata
Compilation timestamp:
10/27/1997 1:18:28 AM

OS version:
458.1786

OS bitness:
Win16

Linker version:
8.0

CTPH (ssdeep):
1536:2zU77O8wiRTsoJlAn7FGXwqIg8MQ4v/EoN06wpYY/2Wy8PN00P:2kZwiRTVJ2kAqIg93Cn/2R4NH

Entry address:
0x1E801E0

Entry point:
4D, 5A, D8, 00, 03, 00, 00, 00, 24, 00, 00, 00, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 04, 00, 00, 00, 02, 50, 6B, 6C, 69, 74, 65, 28, 52, 29, 20, 43, 6F, 70, 72, 2E, 20, 31, 39, 39, 30, 2D, 31, 39, 39, 36, 20, 50, 4B, 57, 41, 52, 45, 20, 49, 6E, 63, 2E, 20, 41, 6C, 6C, 20, 52, 69, 67, 68, 74, 73, 20, 52, 65, 73, 65, 72, 76, 65, 64, 00, 1D, 01, 1E, 08...
 
[+]

Entropy:
7.8311  (probably packed)

Code size:
256 KB (262,152 bytes)

The file diciembre15.exe has been seen being distributed by the following URL.

https://siana.telmex.com/siana/archivosTxt/.../0F00297.exe

Scan diciembre15.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.