Static task
static1
Behavioral task
behavioral1
Sample
rSOLICITUDDEPRESUPUESTO_PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rSOLICITUDDEPRESUPUESTO_PDF.exe
Resource
win10v2004-20230220-en
General
-
Target
rSOLICITUDDEPRESUPUESTO_PDF.exe
-
Size
14KB
-
MD5
bb996d9b387101f4e91d015ef05d5d05
-
SHA1
0a3b10fb5964b6a290e52bae073bd45c8e1b14c4
-
SHA256
b33364008139b4ac87da4a7bb5a5df654ce0296af0ee516fbf3c22e2c80b4207
-
SHA512
ff4934729cc6749f888e20b07a9d50c0e4535c1c2039b48ad33a799199abf0d6afdee2c8955d486ed7f67520c07d5bdf1d6dd2d5ece0997367c86944a4e037cc
-
SSDEEP
384:iPznkx75j81pM04Rj9mH6Y7fnaY8eb+MXd:iLkk1RQirnTJXd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rSOLICITUDDEPRESUPUESTO_PDF.exe
Files
-
rSOLICITUDDEPRESUPUESTO_PDF.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ