Static task
static1
Behavioral task
behavioral1
Sample
Facturas Pagadas.PDF.exe
Resource
win7-20230220-en
General
-
Target
Facturas Pagadas.PDF.exe
-
Size
968KB
-
MD5
9e6291cf4c91f7fd4426dcc845748f4a
-
SHA1
072ef218dd5c096c68f82708ae0871f092a2665d
-
SHA256
176be20e96487583d2fb30bcda4d0258e34d3b89e5e5bf6af486a78cfbff3236
-
SHA512
8b16814118bc611bbacf9a76b18d3e8fa98fe52937493a88cbb227a465dbb3af33475465bc5851a239a576bc6e9385da8601f822c0a5e81b9babc6f679cb1620
-
SSDEEP
24576:QqHXEYNvYQqDylAJm4s3DZqurh4CczD+xhP09Km+2VvYA5COh:tJKInTMurhqX+U91+2Vv
Malware Config
Signatures
Files
-
Facturas Pagadas.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 966KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ