Static task
static1
Behavioral task
behavioral1
Sample
rDetallesdelatr.exe
Resource
win7-20230712-en
General
-
Target
rDetallesdelatr.exe
-
Size
621KB
-
MD5
25ecade37e23a995ddef6c316686d6b3
-
SHA1
036e2d2e8a84d53d203e1acc1519284708d7f5b0
-
SHA256
2484791ea3c160c3de266ebd831f707da64d5e5f31ed81270bf18947128d0933
-
SHA512
7e54555c22bb341ea7fd12ad97c6531c2144298004ebc45b99b8619c06e9f02260d1bf322bf63ad9c6044c01ae76a20b22bee9c3c3350a2c243059f47fcbf018
-
SSDEEP
12288:1pSZMxm/gPrkblHyd6JX0q2pMQtUtu6y+RC4sB9cLgr5BOvuE:Y1wrkblHCiX0ZbtUtu7+RU0gq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rDetallesdelatr.exe
Files
-
rDetallesdelatr.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ