Static task
static1
Behavioral task
behavioral1
Sample
Orden de compra.exe
Resource
win7-20220718-en
General
-
Target
1d353da3fe658893fc339803df7d154f
-
Size
870KB
-
MD5
1d353da3fe658893fc339803df7d154f
-
SHA1
af055ef0f98a53253fd1c22251792f764d2ddaef
-
SHA256
9f35a2c105be7758b4e8fba5867613c73fa1f45dd6b0456edb375beb1dd0d65a
-
SHA512
ed96e8d006e596806609eedad293ad70bd688de1c709d6ebf8c844afd540af433276eac3d3b16e9730c759b189169f42293b9c5d8502c5377dae45ba0a7eed97
-
SSDEEP
12288:ZU3oWehEqmIJtwdmZlL1fI/AwR+kySX8WIJtuD9eEwGZBhkZ5mv48j18zpr2:+Heh9mldmT1ItRdlXdQ05CH8jip6
Malware Config
Signatures
Files
-
1d353da3fe658893fc339803df7d154f.eml
-
http://www.flamingo.com.co
-
-
Orden de compra.zip.zip
-
Orden de compra.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 756KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt