Static task
static1
Behavioral task
behavioral1
Sample
NOTIFICACION AUDIENCIA ............B/NOTIFICACION AUDIENCIA ............B.exe
Resource
win10-20230220-es
General
-
Target
NOTIFICACION AUDIENCIA ............B.REV
-
Size
814KB
-
MD5
48b8541e0640975e53b0500621dc832b
-
SHA1
577cd033c282c5b1b4692571afc1e82247b31c70
-
SHA256
95f795741d70932512b2fbc49255407b0dfd6e439d0662ae57abf31dfa9b6d12
-
SHA512
6e63b32bc3b08fa28e2122876797a15188772d41c39e32e427e1c295af1bcc7c95d46034b587389411779ff412e2ce62cdf1445764aa87d59ee6bdb17d99261a
-
SSDEEP
24576:WXzwRiOpYtRX8JrYLWqYh74Y5XzvCfHn+ad:WXERiUOmJQW5ZQH3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NOTIFICACION AUDIENCIA ............B/NOTIFICACION AUDIENCIA ............B.exe
Files
-
NOTIFICACION AUDIENCIA ............B.REV.7z
Password: 01639845
-
NOTIFICACION AUDIENCIA ............B/NOTIFICACION AUDIENCIA ............B.exe.exe windows x86
Password: 01639845
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 634KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ