Static task
static1
Behavioral task
behavioral1
Sample
FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.exe
Resource
win7-20230220-en
General
-
Target
FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.tar
-
Size
517KB
-
MD5
4c5130a03273312ee1fdabcdd4eabf71
-
SHA1
e726b0814a9354afd3161b496064bc82f8efd92b
-
SHA256
d7097f619fa3d659ed334fe78b12b3ca0e6b2809fae417c37af32a8f5dc8a768
-
SHA512
50a446fb73d22bb2bd0e6469748059e0df23ab546d87055ba547ecbd2cfa5b204cb70d8790ef32374130b7ec16de27e3f38ef227b846f35c4981ec1a2f982187
-
SSDEEP
12288:OXESM2wUdZCPLjISPSqQj7FJbBElHohU5oD8PH+eSo:mEALdkSj1r5W5ofeSo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.exe
Files
-
FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.tar.rar
Password: 68091
-
FWD-2984758'0348693846830 DEPENDENCIA Y DOCUMENTO DE RADICADO DE CITACION FISCAL.exe.exe windows x86
Password: 68091
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ