Static task
static1
Behavioral task
behavioral1
Sample
Documentos.exe
Resource
win7-20230220-en
General
-
Target
Documentos.jpg
-
Size
200KB
-
MD5
6f6611b64596fc9473d19723027eee63
-
SHA1
b448cc95bd3986352b987a3346b225dec930f089
-
SHA256
3b4991b15caab217143981145e3cc12940f27503242726749b5c6440383eebdd
-
SHA512
e4934f7e11c4bc8cff2f36561a3a3e527bac0406688fd1bb5597328364680d781f1ce2d5d6c7e455a38eb579975bf39807c61ab7d1853b1b20b8499ff37432fa
-
SSDEEP
3072:3g+QMi1hSgWw9JGTo3cPyiJwq2v4xAgeSHWs8zNJf6Vj:yHic3Cdw3v4xAghWs8zNJfk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Documentos.jpg
Files
-
Documentos.jpg.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ