prueba de pago-pdf.rar
- SHA256 fd7ab6b64dfe5d083da6f23cc6d2dee18bf7eb79ffb4ea9b053542391b591d03
Static task
static1
Behavioral task
behavioral1
Sample
prueba de pago.exe
Resource
win7-20230712-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
prueba de pago.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target prueba de pago-pdf.rar
- Size 456KB
- Sample230808-q65dasch57
- SHA256 fd7ab6b64dfe5d083da6f23cc6d2dee18bf7eb79ffb4ea9b053542391b591d03
- MD5 8be7d694d376bbb14dcdfe4883224acb
- SHA1 257366e663ce589e4bc87379928c07ca82d5e771
- SHA512 8df5e3fc441f72d99e8ad1bc572613797170d3b488f660fc2bbd6f2522c24cdb6cec68ef0d1a5d09b6229cee27fabcc1ee29433a6874b06e41a3963829022812
- SSDEEP 12288:bt0HofYP0TDT43GyKiBIF06dQTUMmE//ll:Z0IfYP03sWriICsQTUJ0/ll
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
prueba de pago-pdf.rar.rar 456KB
-
prueba de pago.exe.exe 560KB
prueba de pago.exe
- IMPHASH e221f4f7d36469d53810a4b5f9fc8966
- SHA256 11a13f0291f2145e792f3f7d18a1c3747767e93b71292a9fdefed34d52dff3b8
- MD5 f635f99f740b1bd4f2e5c5d968bf3c4a
- SHA1 e9d73ba51502695bba19093b63370a431442d225
- SHA512 1de9d951ab3f18dc476275820cbc0a1332cb3376dc3ce2562beb506f79534f971adc7ca20bdedac8ef752d798c2dab2b4a9432ba92d2622891990b0f99316c97
- SSDEEP 12288:xtHb13bWictv8DDM+1FwFj5u6R257MXXkuOaziOUeq:vbNrcx8DDY5u5VNazDg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a2:13:0e:a4:3e:25:ff:08:42:d9:cc:d9:3d:cb:ed:15:aa:9a:09:aa:71:dd:a8:fd:ea:15:10:1b:15:7b:9c:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
OU=Garantibevisernes Duomos\ ,O=Sammenplantningerne,L=Kogel,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c174f7574666c6f776e404175746f6772616669736b2e5361
Chains
Aug 8, 2023
Subject
OU=Garantibevisernes Duomos\ ,O=Sammenplantningerne,L=Kogel,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c174f7574666c6f776e404175746f6772616669736b2e5361
Serial Number
69:44:e2:a7:57:3e:17:43:b6:3e:12:40:ba:6e:69:37:15:4f:00:c6
Issuer
OU=Garantibevisernes Duomos\ ,O=Sammenplantningerne,L=Kogel,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c174f7574666c6f776e404175746f6772616669736b2e5361
Timespan
Apr 11, 2023 - Apr 10, 2026
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
Major OS version
Entry point
13144
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
SetFileAttributesW
ExpandEnvironmentStringsW
SetErrorMode
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
GetCommandLineW
GetTempPathW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte
user32
EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ