Static task
static1
Behavioral task
behavioral1
Sample
rCotización51723.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rCotización51723.exe
Resource
win10v2004-20230220-en
General
-
Target
rCotización51723.exe
-
Size
874KB
-
MD5
ecf6509a79debddb83b8e564c8a10bf9
-
SHA1
2dc26a4119fdd066abe244a181f538b385d3b02b
-
SHA256
04444081777926a4c1ea259918bc6d7a2b1176700b98beae1230ac8d4939e82e
-
SHA512
5a32b2f76b36f60379663272a94ad3aac2be40652d7449ad7b26b59524abae17f4ba876cba2711c38d8b9994295d0c3b62507eadba019021f11b0d6218ba8945
-
SSDEEP
12288:i2iNfUFotEvZ41unyxDFXcJBKqi7cccyw7qRqVqVSDFZO9L5XKC:i1Bs0qZ4wny3XMsccc4XQMX3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rCotización51723.exe
Files
-
rCotización51723.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 872KB - Virtual size: 871KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ