Static task
static1
Behavioral task
behavioral1
Sample
NOTIFIQUESE DE CONSIGNACIÓN INTERBANCARIO CUS860007368.exe
Resource
win7-20240221-en
General
-
Target
payload
-
Size
1.4MB
-
MD5
2480d543309b678b0a93da2ed7aba357
-
SHA1
3f1585a394f7d45bb6e9b3904dae277d821b6bf4
-
SHA256
a60e1197ebcb2a8e1a986ca1136ece71f29252f929841dc0896a7531ed97a1c7
-
SHA512
e92017550090b10e8730fe8e742ec1648c3c4acda5fc2cacbc4382cfeb215b8ff79eb33d64dd4fb8c778f8101de7660c4e079632abc96a869170a06b05ecbefb
-
SSDEEP
24576:XyXCzxw5E88s6Hhvs70FmfRqC4XUSE6poNCgA9xb8w0GJ0WcQuhnjE2500+UkFyr:XyX288s6BvsQogC4dRoNqxb8fLhnjL5l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NOTIFIQUESE DE CONSIGNACIÓN INTERBANCARIO CUS860007368.exe
Files
-
payload.rar
-
NOTIFIQUESE DE CONSIGNACIÓN INTERBANCARIO CUS860007368.exe.exe windows:4 windows x86 arch:x86
Password: 4558
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 519KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ