Static task
static1
Behavioral task
behavioral1
Sample
Justificante_Pago_Certificado_Corriente_Pago.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Justificante_Pago_Certificado_Corriente_Pago.exe
Resource
win10v2004-20230915-en
General
-
Target
67f40b3ee5517e545ce0cbcdcb1495fb.bin
-
Size
581KB
-
MD5
1c1212f55f5da812cc08e790d4f55825
-
SHA1
4c0027c1776ad2621952faf9169f8da5da37002c
-
SHA256
28599691509badb517a10f36922f8efc8b4b5a4f4bbc7319a130eede8cef818c
-
SHA512
ceb180367a815f497d607c2e60b06fe19b40573f54314dec1af14708e2b3ce0eda71936341073b9ad80b7dbc8ee269d2f7762c0f51cfeffc9539df82311d0c59
-
SSDEEP
12288:Gljt8Xr8E+FJ6+YxLX2u+oCVd4U48J/WLC2i9/u6eMki:GlSx71m/VO7E/sC2A/u6eMki
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Justificante_Pago_Certificado_Corriente_Pago.exe
Files
-
67f40b3ee5517e545ce0cbcdcb1495fb.bin.zip
Password: infected
-
1a98f91be8bd6e6dd0cc1914e1bd866cce2a077b5fe610bd833b46d8bbccf807.rar.rar
-
Justificante_Pago_Certificado_Corriente_Pago.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 606KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ