Static task
static1
Behavioral task
behavioral1
Sample
Cotización-002.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Cotización-002.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
D478B7E1FBFC588F5DDC63AD65E584E1E2F0F468BAA5F4FA6CF592E88C5B9E4A
-
Size
429KB
-
MD5
39f9e1b0018cffe7b654317d69dd770a
-
SHA1
403f45fcc7a93fa01b577afca8a415b9ef6ae7d3
-
SHA256
d478b7e1fbfc588f5ddc63ad65e584e1e2f0f468baa5f4fa6cf592e88c5b9e4a
-
SHA512
ea00a896046106a428f2e4f3afd24503e6a6c297d29e05f80b5a8911d94ceadc5e05d117925a9f3265170779fb3bdcc23add814a4ae8c16ecfcaf0154394b23e
-
SSDEEP
12288:nzcfAA3JQuYhyySlL7yDKO8xfGL2ffjsB:zxJkuDH8Zvz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cotización-002.pdf.exe
Files
-
D478B7E1FBFC588F5DDC63AD65E584E1E2F0F468BAA5F4FA6CF592E88C5B9E4A.rar
-
Cotización-002.pdf.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 454KB - Virtual size: 454KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ