Static task
static1
Behavioral task
behavioral1
Sample
PQR Nro-992778279-21 Informe_Preliminar_Caso_Ref_#00098272-21.exe
Resource
win7-20230220-en
General
-
Target
PQR Nro-992778279-21 Informe_Preliminar_Caso_Ref_#00098272-21.uue
-
Size
603KB
-
MD5
c289c59c15b6e8f58ab30152af98cf08
-
SHA1
3720702a1c4819f80992b5a3487669474519e860
-
SHA256
a7f14a33b333e2d5f73c9b1317a21ec1fc3ab12ccc582b9df94b32308423d137
-
SHA512
b4eb5651eee60310b2549073550831886444314a911e3acf297d8825ddb3e5ea3656928f1ac1e1291afa7068ca89f7be0f50b1f691a6c2637aec8e3f136bb29b
-
SSDEEP
12288:cittp0Y97r8JM6WnFdbLiYfmW9NYlUavq0SSiuYPvFhtheOnt2SVbdnNAus:cittp0YBr8+hTLiYfPtay0STtsOnt2mQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PQR Nro-992778279-21 Informe_Preliminar_Caso_Ref_#00098272-21.exe
Files
-
PQR Nro-992778279-21 Informe_Preliminar_Caso_Ref_#00098272-21.uue.rar
-
PQR Nro-992778279-21 Informe_Preliminar_Caso_Ref_#00098272-21.exe.exe windows x86
Password: 2525
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 535KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ