Comprobante de pago[.] Exp[.] 9815[.]pdf[.]gz | Triage

Sharing

General

Target

Comprobante de pago. Exp. 9815.pdf.gz
Size

511KB
MD5

2c1bca6a6f6c76d8cd6a7430dda0bbd4
SHA1

b66f3f9d0feb09688718108abd061a8f826f76a3
SHA256

f2c4896d5fecbae3c9cc2e8b173de61d0822be361365f86dd3400e0fbebbeca4
SHA512

60f68b7041eda10f2fe94f478f5ce84473611dc803dd58a09ef6528a30f9f34c2a9fb331fc3976c76923f3b51c6b3eb7fcd493d554dffbe1fe58ae0ec0f89d62
SSDEEP

12288:pBRzIcE+mfyLGg8CP1Y9ENtNWars1LBv9FKjzEEWB9AAm2ZsDbV:pBJIcxGgNnhrs1LB2cEW7lbsDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Comprobante de pago. Exp. 9815.pdf.exe

Files

Comprobante de pago. Exp. 9815.pdf.gz
.rar
Comprobante de pago. Exp. 9815.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ