Static task
static1
Behavioral task
behavioral1
Sample
Aviso de pago - (DS78B) Pago # 133060908_PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Aviso de pago - (DS78B) Pago # 133060908_PDF.exe
Resource
win10v2004-20230220-en
General
-
Target
Aviso de pago - (DS78B) Pago # 133060908_PDF.exe
-
Size
1.1MB
-
MD5
58c01930a4cb94fba781a7a07cc67a1c
-
SHA1
6f3ae20b37eb60f39e1eb3c0f9a207e0b4e06450
-
SHA256
d4c55ea1e9956cec3e77fb87826a4b70b967e80a1f48d0571dd4bc0bddbb3c43
-
SHA512
00653e4bf910dc34a2719a8ec8fbdfd1ba848a7a3415184efa9fac42ddfec7d4b36ee9a804dd7545378013a3cd5cbeeb2fcfe330de8fb2638e6ca43117ffa931
-
SSDEEP
12288:hbKMHK/e6OCYU73TzoW1lypqoKdD6eNHNNxBLZMHl:khd8i3TEW1lKAHNtNL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Aviso de pago - (DS78B) Pago # 133060908_PDF.exe
Files
-
Aviso de pago - (DS78B) Pago # 133060908_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ