Static task
static1
Behavioral task
behavioral1
Sample
Carta de pago.exe
Resource
win7-en-20211208
General
-
Target
affaec3e32d0244aaf424180de568e23d03da3eb6c43dcb0b82b4e5185731abc
-
Size
418KB
-
MD5
9a4da2f3284b0179325ab5c1aab91db7
-
SHA1
5c227f6a98ba91dd4f697c6481fb2c7edc554e5c
-
SHA256
affaec3e32d0244aaf424180de568e23d03da3eb6c43dcb0b82b4e5185731abc
-
SHA512
0af714f93dbfa178df16698ab03796a8e86e98e86f4c3e0b296a0b023f05290a31d9d6339fe6f78df3d2c09a86a0281d87974c30cf26dd70ddc8cf9f44f0cd89
-
SSDEEP
6144:ixNFYoqeHQPJ3GERo95/shp8wPWFVm04N0dVo:0NFYHeiRg/s78wPWS/0dVo
Malware Config
Signatures
Files
-
affaec3e32d0244aaf424180de568e23d03da3eb6c43dcb0b82b4e5185731abc.iso
-
Carta de pago.exe.exe windows x86
375074facb4538d8601767b5ab845277
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
fwrite
fseek
toupper
fflush
rename
remove
exit
memcpy
_exit
_XcptFilter
__p___initenv
fclose
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fopen
rewind
scanf
fread
system
__getmainargs
printf
_getch
_getche
kernel32
GetConsoleWindow
GetProcessHeap
HeapAlloc
GetStdHandle
SetConsoleCursorPosition
LoadLibraryW
user32
GetWindowPlacement
DispatchMessageA
WaitMessage
ShowWindow
RemovePropA
DrawCaption
shlwapi
PathCanonicalizeW
StrCpyNW
PathUnquoteSpacesA
SHSetValueA
UrlEscapeW
ChrCmpIA
resutils
ResUtilIsPathValid
ResUtilResourceTypesEqual
ResUtilEnumPrivateProperties
ResUtilGetProperty
ResUtilSetDwordValue
winmm
waveInGetPosition
waveInAddBuffer
mmTaskYield
timeEndPeriod
wod32Message
rpcrt4
RpcBindingInqAuthInfoExA
NdrMapCommAndFaultStatus
RpcProtseqVectorFreeW
RpcSsSetClientAllocFree
I_RpcAsyncSetHandle
NdrContextHandleInitialize
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ