Static task
static1
Behavioral task
behavioral1
Sample
PROFORMA PEDIDO.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PROFORMA PEDIDO.exe
Resource
win10v2004-20230220-en
General
-
Target
PROFORMA PEDIDO.exe
-
Size
707KB
-
MD5
ec3c6fde8d3f62fa5ae933ce3d4dcba3
-
SHA1
1175bc7bf37a2942777cf85c4172a3352058b027
-
SHA256
d3b15a575e1cbb1fb69ff44063e584385027d4f6c1ce73ccaa97208c8b77fb4e
-
SHA512
2771ac65c68e6fa7d1d213438bae00a6b2c8975aef13515fd91f98d4c4424ae7047d2719f5a5c093c9fd233f8dee663a1a1837aaadd9cd3f10caf3aaf017a44a
-
SSDEEP
12288:FbkcdXHwni4IyS+bvwfn1gIdSMvW9IRv4eIYl701hFcRz91tbLwGDE4X:FbJNwLb+X10IRweI4ChFq93bLwME4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PROFORMA PEDIDO.exe
Files
-
PROFORMA PEDIDO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 705KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ