Static task
static1
Behavioral task
behavioral1
Sample
pwPtnt8MLemdm8L.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
pwPtnt8MLemdm8L.exe
Resource
win10v2004-20220901-en
General
-
Target
ccb2dacb5c80181bcf94ded98b8145e5
-
Size
1014KB
-
MD5
ccb2dacb5c80181bcf94ded98b8145e5
-
SHA1
e111b9d573c00a97f3eb09ee7bc422391c84a028
-
SHA256
548f0fad78cc943b9870757ee9df5461dd60de18e08e70ca14ac411fd63ebe80
-
SHA512
ddb6627b3c07ade629224f02309c9885168f295dd32063c3109f66f60b830173b5a52a7fa6192ce6889f71cdd4fc7546477bc2fcc1ee0e64a20e9cadbb748822
-
SSDEEP
24576:Fb4aqf/tq3mKNm4B5P2Y1TfAKhx0ZjhnWGfST:Fb4aqfFfh0r1MvnWG6
Malware Config
Signatures
Files
-
ccb2dacb5c80181bcf94ded98b8145e5.eml
-
email-html-2.txt.html
-
email-plain-1.txt
-
transferencia de-0413 bz.zip.zip
-
pwPtnt8MLemdm8L.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 921KB - Virtual size: 921KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ