C:\_RU\WeAreChmnet\WeAreChmnet\obj\Debug\WeAreChmnet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Revisión de cotizaciones_________xls.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Revisión de cotizaciones_________xls.exe
Resource
win10v2004-20231215-en
General
-
Target
Revisión de cotizaciones_________xls.exe
-
Size
36KB
-
MD5
a2b976be8de5eef2b5793ec29b8eac3b
-
SHA1
984077f917554731ef4fce4af72d28583abb8231
-
SHA256
f2b532450ed44fa884c0ea547b17a6a11524c2abc5a0b8278143d0b26604bbf9
-
SHA512
76f56bf0e2b8d8baf5b49379adc0af8d910fc5167d22a55a5459c61fcfe9a09522754e9b9be294fa58bffe0235272449640e017236920e6ee288af3190e79c2b
-
SSDEEP
768:+ILy+/K7R2BxMnNiv8OnnLgQlRjhKoQxGuz1EPXj5YuSz:+wrv8OnLg+KnxGQb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Revisión de cotizaciones_________xls.exe
Files
-
Revisión de cotizaciones_________xls.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ