Static task
static1
Behavioral task
behavioral1
Sample
BOLETA DE CITACION.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BOLETA DE CITACION.exe
Resource
win10v2004-20230220-en
General
-
Target
BOLETA DE CITACION.exe
-
Size
1.3MB
-
MD5
eb23f827f55747abccb6476742d7e447
-
SHA1
9307bc90e5335c98d5857fb35ef65e447721216c
-
SHA256
b4e24e5159b3c78a8318b63d1a54ff47c17e073ffc174638ec71ba8b8c76b5b9
-
SHA512
6329dfc6da613afcc36c6ffe40f9c6e50dbd721a2b41fd0b6c1cba4c490909ff896bab12abf66fa9031dc6672e3aa187a30f67ed0f94737ba870bd87d5991324
-
SSDEEP
12288:rjOJFmkquTKuNIqBovfLjAwL3XAT4OjGP9s:PP7uNIYorswDXZP9s
Malware Config
Signatures
Files
-
BOLETA DE CITACION.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ