Static task
static1
Behavioral task
behavioral1
Sample
lP8RuvFWKzfdtMK.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
lP8RuvFWKzfdtMK.exe
Resource
win10v2004-20231215-en
General
-
Target
0791aeefe7d00bf73bc59baaa9d33819
-
Size
697KB
-
MD5
0791aeefe7d00bf73bc59baaa9d33819
-
SHA1
2f28d75a00a2326809c4613479e105f9019a021c
-
SHA256
18b2bba97adead193d9d8a0d241877341595c281e6724bf12bd1447ba090863b
-
SHA512
99289c314417cb39162fd9c4d9fc0e3e853ec56c2117fb5f9c050f89b2480f41a92160523b0daca4b3507e0660f73a273bcfd6d68f9d2d9cd331cf814c75c9e1
-
SSDEEP
12288:H6+wYIwRqfj5mluC7SAYnoY+CkHX4iOYUy9T6zqX51cA/gOpCnMt27PhZ3Kk0tp:aTZwRWSG+3EPzqJ1cA/9M50L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/lP8RuvFWKzfdtMK.exe
Files
-
0791aeefe7d00bf73bc59baaa9d33819.eml
-
email-html-2.txt.html
-
email-plain-1.txt
-
factura.gz.rar
-
lP8RuvFWKzfdtMK.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
image001.jpg.jpg
-
image004.jpg.jpg