Static task
static1
General
-
Target
RE_ SOLICITUD DE COTIZACION URGENTE-password(TEOxDnA4).zip
-
Size
2.5MB
-
MD5
edf21f68a1e480cf5f11cc9299dd5d00
-
SHA1
7e052a8c8e98d0e6af96276fb8833e4e0463e82b
-
SHA256
d7f2fbb415465492291a7008501332124da16b92585dc6ce36d25a17f805b488
-
SHA512
e2a16549440308dd706a1ba23821c9fcac5c8d70a8b3fc6d4c754787d86be69be6e432c1f4427995434c625231e9fc03ae8023d730f4aad93cb81298020ee848
-
SSDEEP
49152:Bm8krHJ/oa3ZQ2q33vC9PhgG24AZEm5lAE70x2KvcTU:BFcp/o6qUXwZrvQx2uD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/QUOTATION_MARQTRA031244PDF.scr
Files
-
RE_ SOLICITUD DE COTIZACION URGENTE-password(TEOxDnA4).zip.zip
Password: TEOxDnA4
-
20a34821c4be724845067b4a91d5649ba2b81611b06870a9e504c38da1781584.eml.eml
Password: TEOxDnA4
-
http://www.dewit-mexico.com
-
-
X_150263245200_0_1.z.lzh
Password: TEOxDnA4
-
QUOTATION_MARQTRA031244PDF.scr.exe windows:4 windows x86 arch:x86
Password: TEOxDnA4
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-plain-1.txt