Static task
static1
Behavioral task
behavioral1
Sample
DOCUMENTO TRANSACCION VIRTUAL 26 DE MAYO.exe
Resource
win7-20230220-en
General
-
Target
DOCUMENTO TRANSACCION VIRTUAL 26 DE MAYO.tar
-
Size
1.5MB
-
MD5
de45549e4b58619b2ec2859b0264b1fa
-
SHA1
af10001884eba51c95b81ef6770d3425dad4993b
-
SHA256
85f65618b5e880d0d62cc92c4ad88b0cf96dc05372c84c66786030bc7c0ecb43
-
SHA512
b4741b90c4b3015349b81026dec04b791dde15a8e2bcf8af0bb1d735edd4830bb2e271bca87b6c81d3cfefdfe933e065deb01b41a7e65d3cb7c99740c65b1676
-
SSDEEP
49152:uz14wmPnNjpcW1s9IlmWTC7bh97S2CNxhpuy21B5RINON4I:y143vgWVmEoN977CNjpu1jnNJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DOCUMENTO TRANSACCION VIRTUAL 26 DE MAYO.exe
Files
-
DOCUMENTO TRANSACCION VIRTUAL 26 DE MAYO.tar.rar
-
DOCUMENTO TRANSACCION VIRTUAL 26 DE MAYO.exe.exe windows x86
Password: 9374
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ