Static task
static1
Behavioral task
behavioral1
Sample
ConfigCorreoWSBod.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ConfigCorreoWSBod.exe
Resource
win10v2004-20230220-en
General
-
Target
ConfigCorreoWSBod.exe
-
Size
277KB
-
MD5
ee88cf96759a1b384b896ac8bf2abf8f
-
SHA1
e0b758c936b0ee8397361f09c6e92971cab1209b
-
SHA256
8749854b74f8e500c0dd557b3535bedfca6513e7d7a1f689da1eab75bfafb801
-
SHA512
863cf43eb7c3d96a090b560c83e798b352cfee3ce7a16bc8b1c86dc86163a3a793e8afecd0026e886acd353fed55c869187aa90182f27753a18249122b95a17c
-
SSDEEP
3072:njRo4Xo3ViIYA21t1CT6OnkbeTihdHG5Ddo4Xo3ViIYA21:lo21u68kbB+ho21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ConfigCorreoWSBod.exe
Files
-
ConfigCorreoWSBod.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ