Static task
static1
Behavioral task
behavioral1
Sample
nRE_RFQ__AQQ_-_NUEVO_PEDIDO_pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
nRE_RFQ__AQQ_-_NUEVO_PEDIDO_pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
nRE_RFQ__AQQ_-_NUEVO_PEDIDO_pdf.img
-
Size
673KB
-
MD5
09c7bc167d3e471fa81a5b965ab9a708
-
SHA1
3c2c38191ff0607ab8db498033d7954e2c1f2b25
-
SHA256
4571baeca67cf5bdbf435a6c65112b6fe2a2d2f36e5da65ce6150faae407f841
-
SHA512
cc1367f5b3165bed7885ad90e3bee4981d00d79f32214d8b6386e422b7f4cd95cca2a2b65d00d2e25bb2702dcb8073fe4c1bb0421f4c041c3c235ad61717ae98
-
SSDEEP
12288:hir7s92wE61T7PpY86ZdA4rXbVsUOnsqw7yzfKLYpGpiNV:hir7s92T6V7xYDZiiXbVsbwGzsOGpi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nRE_RFQ__AQQ_-_NUEVO_PEDIDO_pdf.img
Files
-
nRE_RFQ__AQQ_-_NUEVO_PEDIDO_pdf.img.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ