Static task
static1
Behavioral task
behavioral1
Sample
Calculadora coeficiente de difusividad.exe
Resource
win11-20240419-en
General
-
Target
Calculadora coeficiente de difusividad.exe
-
Size
76KB
-
MD5
27b0ca1e6f3beaf8c565ec3a4f6125c2
-
SHA1
aec939e391ede20e19a8577ead2948d90237eaf9
-
SHA256
620b0ccce64c1cfb6e8450857a0407099b435831396be16d0d832a35d57f7575
-
SHA512
e8dac2a8f2742084d8be43eac047faf5378275b682d9733a3f66df80778a26400d65a608e9135bfe41122e2289c8d76102f095eed328496d5e1949b398097ece
-
SSDEEP
384:nDoTlanjoy61d49kmkKKvR5s3ckBoTATeJ6Quz:DoRanDH9kxvaDTe6Quz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Calculadora coeficiente de difusividad.exe
Files
-
Calculadora coeficiente de difusividad.exe.exe windows:6 windows x64 arch:x64
34c982746192a5e4664c691454d07eb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
MessageBoxW
MessageBoxA
python312
PyObject_Str
PyMem_RawFree
PyUnicode_FromString
Py_Exit
Py_SetPath
PyImport_ImportModule
PyErr_NormalizeException
PySys_GetObject
Py_NoSiteFlag
PyObject_CallObject
PyMem_RawMalloc
PyUnicode_Format
PyTuple_New
PyExc_SystemExit
Py_Finalize
PyMem_Free
Py_SetProgramName
PyUnicode_Join
_Py_Dealloc
Py_Initialize
PyErr_ExceptionMatches
PyErr_Fetch
PyLong_AsLong
PyUnicode_AsWideCharString
Py_FrozenFlag
PySys_SetArgvEx
_Py_NoneStruct
Py_IgnoreEnvironmentFlag
PyErr_Clear
PyObject_GetAttrString
kernel32
GetSystemTimeAsFileTime
GetModuleFileNameW
LoadLibraryExW
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
AddDllDirectory
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
wcsrchr
memcpy
memset
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
terminate
_register_thread_local_exe_atexit_callback
_cexit
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_crt_atexit
_set_app_type
_seh_filter_exe
__p___argc
__p___wargv
_c_exit
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vswprintf
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ