Static task
static1
Behavioral task
behavioral1
Sample
Nueva orden de compra Pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Nueva orden de compra Pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Nueva orden de compra Pdf.exe
-
Size
1.0MB
-
MD5
fa79c461e66d4a34d800b0c89f493ef7
-
SHA1
ee4304e6ba8ddc2845f6acb0e15bffb9baf8fbcf
-
SHA256
192e207cdd8aa22ef3c05c208f59580976a35c5a3050902b940703cdd7f4c1fb
-
SHA512
0110d2952d747f64e5e5007cfc275890a0f6c574fbed09d796b3c3437fb7c296ff195991f99157fb966e8a71d1d43896b1de3a4919adafaa48723768770ace93
-
SSDEEP
12288:puEaudgNU4BfyVxVLvcphuBZtILJHZqxBw6t3kIBl1AgUQ+v5/p:wEsU4gVxVLvc+jId4pzBsN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nueva orden de compra Pdf.exe
Files
-
Nueva orden de compra Pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ