Static task
static1
Behavioral task
behavioral1
Sample
COTIZACIÓN-38200.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
COTIZACIÓN-38200.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
COTIZACIÓN-38200.pdf.exe
-
Size
792KB
-
MD5
89c89a06094b0b65b8a915de16ccb5b5
-
SHA1
255ea88c676ebaf4cc21e8c8f3e20dd921833d08
-
SHA256
4eff9b9fcfb59f8402b524565f92e905dbec8c610ec6dadaf9c3cb1fd5c3e5e0
-
SHA512
dc516879f57ba50f984985c8bb6e29fb4bcb20ff0ea3b56ee45376ade353c6244b09b4659757501c9fd0199b5d9bfdc81c7d394d90e3b7a4591cd82b5a584bfc
-
SSDEEP
12288:US8hue/3H1JxjnTh4uV/yFoLUgyyEQXtT28Z7oVd+SYXo8EDucM0:UBJxvh4uMSf5TX72d+S/z6c7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource COTIZACIÓN-38200.pdf.exe
Files
-
COTIZACIÓN-38200.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 789KB - Virtual size: 789KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ