Static task
static1
Behavioral task
behavioral1
Sample
TRANSACCION PSE - Realtech LTDA.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TRANSACCION PSE - Realtech LTDA.exe
Resource
win10v2004-20230220-en
General
-
Target
TRANSACCION PSE - Realtech LTDA.tar
-
Size
737KB
-
MD5
2d381341465b75a97bf9a47d705b9251
-
SHA1
e6a04decd639f3d9ac3b6c88449aefe85ef330f8
-
SHA256
7d5a68744590387a7f069f5e6083ad88223fa2592ccf3f1763e241c7840d55d4
-
SHA512
62b599dff8137370a12366ad34ca2f9564273236f4b7d069102222a10c6db141f6dff8ed3ae1028a93f59d20ca84e4b7e73819f606d2024e46760d19abaa7b96
-
SSDEEP
12288:Sut3A0f/WfU5dHeXiYbpL8RKKTVUBWJb6zRLPxBOXd6L3+dMt8edSE6Tkelaqx:RTWc5teleRpUcJb6zRlBOIL3WMOaxhe/
Malware Config
Signatures
Files
-
TRANSACCION PSE - Realtech LTDA.tar.rar
Password: 2023
-
TRANSACCION PSE - Realtech LTDA.exe.exe windows x86
Password: 2023
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 517KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ