Static task
static1
Behavioral task
behavioral1
Sample
DOCUMENTO CORRESPODIENTE A PROVEEDORES.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
DOCUMENTO CORRESPODIENTE A PROVEEDORES.exe
Resource
win10v2004-20221111-en
General
-
Target
DOCUMENTO CORRESPODIENTE A PROVEEDORES.tar
-
Size
777KB
-
MD5
4a967914b96117b10ce268d55c32349b
-
SHA1
b55f04dd1c0fefb90938ec9f587f180946995a86
-
SHA256
37652d05d4cf5296eb1f24f47274fb9556000f14ad2b9a9622ebf9da3471d2a0
-
SHA512
2ae7041fea0a79b93e947986a6437f51d49ef09274a05ef14e5b60947e6cb42d0cc0a766864cd7f809a35974a1781b591c196f6ee37f87010ce7d0e07e0e852f
-
SSDEEP
24576:KT1kxfBs1XTx30oJR5GsuBGKqtQU4BdU/xpIHKQ:RfcXTx3h1uozQveZpIX
Malware Config
Signatures
Files
-
DOCUMENTO CORRESPODIENTE A PROVEEDORES.tar.rar
Password: 6632
-
DOCUMENTO CORRESPODIENTE A PROVEEDORES.exe.exe windows x86
Password: 6632
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ