Static task
static1
Behavioral task
behavioral1
Sample
FACTURAS PENDIENTES.exe
Resource
win7-20240215-en
General
-
Target
11042024_1509_10042024_FACTURAS PENDIENTES.gz
-
Size
614KB
-
MD5
5c7328ea7af0a7c6334d883d73ef6574
-
SHA1
288a67526e81e1516702498ca4f942f85b6dd000
-
SHA256
194975771b4404e9b51d6cb22856e1c3130170fe5f2aec622d1ce8c924aeefd6
-
SHA512
f1627179b178d9c8d765c28af90a4d7f6e747ef5c2391ce2d8c1428c8d8bb787809c20409b147fa0fe18d2da4b0117e80e290fd900000f9bf0e8c02e83b3db99
-
SSDEEP
12288:q2+LkRtwIy9ooXWciFi/9bQi2mT0+sBzhOM+DJ86+KuinT5bG04Qn:kkr8BXriF8bv2mT0+sB9YNCKtnToHO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FACTURAS PENDIENTES.exe
Files
-
11042024_1509_10042024_FACTURAS PENDIENTES.gz.gz
Password: infected
-
FACTURAS PENDIENTES.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ