Static task
static1
Behavioral task
behavioral1
Sample
Orden de Compra 5002981471.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Orden de Compra 5002981471.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
5CB424D26FA24EAE72233AC9629290BA0E21C691348810351E8B778B2839E2CA
-
Size
705KB
-
MD5
a31f46f297c76f4e8c7e03e804e78928
-
SHA1
19156cfe836d9e4afff098e8069a522cdf747955
-
SHA256
5cb424d26fa24eae72233ac9629290ba0e21c691348810351e8b778b2839e2ca
-
SHA512
53783137d13aa5d27953d4dcef3c252d3be6c57a4e4ab7f1aa578353d1ea18c377c39c4595dd5f4eb06544343eb3dea78006b68b1356d6fe9229b6f57b02c115
-
SSDEEP
12288:t3x5sTuEsE0str+soCZDrIawtdH+Dme2p3hx8n83rbaED8OFCu:th5syk0UrjrI7PeDmFn86navWj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Orden de Compra 5002981471.pdf.exe
Files
-
5CB424D26FA24EAE72233AC9629290BA0E21C691348810351E8B778B2839E2CA.rar
-
Orden de Compra 5002981471.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 971KB - Virtual size: 971KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ