Static task
static1
Behavioral task
behavioral1
Sample
ACTA CITATORIA PROCESO 00268379472731.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
ACTA CITATORIA PROCESO 00268379472731.exe
Resource
win10v2004-20220721-en
General
-
Target
ACTA CITATORIA PROCESO 00268379472731.exe
-
Size
4.1MB
-
MD5
2b8a731c4a792c330602580f47f0d3f1
-
SHA1
8472b7f1033877da3b9d032c49effaa71cd22647
-
SHA256
cbbd0f3fa74e58614002e06976eddfedae41a8d458c5410077e27b030ab31ed6
-
SHA512
c8871c1f73834534005e7703cae7e431e85616a80e8653f53dbb6e310b4ddf186ee0d037297f0b0aef95b6da16cb81e2129ab36f8b52c25fe1643cf196c50911
-
SSDEEP
98304:N0FCfuDhzlB5gMBUhIzWjsKmQkQsopbUm8/p/p:CFVDhzlPUIzWjm3o6m8/
Malware Config
Signatures
Files
-
ACTA CITATORIA PROCESO 00268379472731.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ