Static task
static1
Behavioral task
behavioral1
Sample
Pago transferencias-20230404.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Pago transferencias-20230404.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Pago transferencias-20230404.pdf.exe
-
Size
766KB
-
MD5
2bca97438ef4da3d9dc19ba8305fdfe1
-
SHA1
5548243b9f3dcfa1e58f30ae6eac74093e969096
-
SHA256
1c0216850dbb0c54ac0530096791d93e6b2309a72171c933c2f633d49a5eabc4
-
SHA512
6cd4b4e1fdec608c4c4a5a5c0ea07e942e55a79f95fb3c4e996a08a2a081cd826ca302ec5a436863c093b7dced492bb1b8417325820779ab09c059be91a1fc7b
-
SSDEEP
12288:Owi911KxyiwDIWyfnY6bO1YbFsjIjR+4F2aHT00VE3MTDYSeN9e4rEB:ONPKz4yfnYkOWbF3laaqMY5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pago transferencias-20230404.pdf.exe
Files
-
Pago transferencias-20230404.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ