Static task
static1
Behavioral task
behavioral1
Sample
CITACION-NOTIFICACION/CITACION-NOTIFICACION.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CITACION-NOTIFICACION/CITACION-NOTIFICACION.exe
Resource
win10v2004-20230220-en
General
-
Target
CITACION-NOTIFICACION.uu
-
Size
599KB
-
MD5
a936cc9e2a687dde06abd823aa8e0823
-
SHA1
4074a2843ed34ab44007f073b184aa0f256afcca
-
SHA256
82928b9aae624d8954cc95d3226c5b68d69505fb28b195e94d17338f097b88b0
-
SHA512
8781b5630f7acf0bc7b5f17cc8f7530f8e5a683a895953e86a3294e529591055cb15ea426ede726a78b31ec822146bdd501e753d23767a672f81003ef75a8f0f
-
SSDEEP
12288:JXGVk2tBK/AGCkcwmmABidYrt/2YN2aRb0fT6/PXZRZMKWnBqMBDhKVhKr7psGka:JSji//xAoa2YoT6Xnuqy7JPD
Malware Config
Signatures
Files
-
CITACION-NOTIFICACION.uu.7z
Password: X72F2GÑ01KY
-
CITACION-NOTIFICACION/CITACION-NOTIFICACION.exe.exe windows x86
Password: X72F2GÑ01KY
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ