Static task
static1
Behavioral task
behavioral1
Sample
distribuidora.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
distribuidora.exe
Resource
win10v2004-20230703-en
General
-
Target
distribuidora.exe
-
Size
7.0MB
-
MD5
4c2f43ae88a23ce4353e1ed171e96970
-
SHA1
82cca22ec26ef958036597be214c88639cd46d04
-
SHA256
2a7364d99369121dbe02b83933d3d5878ee37089d76388f0a93a913834bb8fd6
-
SHA512
193bb7de8611cada03c9051c7cf848444354cb79e06ee6fb9a8aa7a5b7f15385b23f0489a74367602d5dfd763f121415f0ea50e9ed467fb66300ac96872c6e78
-
SSDEEP
196608:GrM/oh84d03t82SOo/hhPXH/bC89ZA1zHbXl:C03W2SOo/hhPFQzR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource distribuidora.exe
Files
-
distribuidora.exe.exe windows x86
76742f38f93f518fe7d6945d801563dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
MessageBoxA
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
calloc
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc
strrchr
_putenv
sprintf
malloc
_snprintf
free
__p___argv
__p___argc
strncpy
__p__commode
python22
Py_InitModule4
PyRun_SimpleString
Py_GetPath
Py_Initialize
Py_SetProgramName
Py_OptimizeFlag
Py_VerboseFlag
Py_NoSiteFlag
Py_SetPythonHome
Py_Finalize
PySys_SetArgv
PyErr_Print
PyArg_ParseTuple
PyImport_Import
PyString_FromStringAndSize
PyModule_GetDict
PyObject_CallFunction
PyImport_ExecCodeModule
PyDict_New
PyInt_FromLong
PyDict_SetItem
PyDict_GetItemString
PyExc_KeyError
PyErr_SetString
PyInt_AsLong
PyString_FromString
kernel32
LocalFree
FormatMessageA
GetLastError
GetModuleFileNameA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
GetModuleHandleA
GetStartupInfoA
lstrlenA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ