Static task
static1
Behavioral task
behavioral1
Sample
FACTURAS-ALBARANES.exe
Resource
win7-20240221-en
General
-
Target
03052024_1526_03052024_FACTURAS-ALBARANES.gz
-
Size
607KB
-
MD5
666a84e1ef4d9d810c95d354d2ebd7b8
-
SHA1
b06b212cc8446e94412e80e8b12f6b0b4cb13020
-
SHA256
91c78c928242d993bcd1dc43e3c2f6d506362fbe4295e1d87327241005e2a797
-
SHA512
ede9ae1d9cdf8617f3cf8325d81a76b295b23b141f1328a8cf5b1debea6801c68bc3a763afa8120379aae7ab9203f8e3fea5936aea63631dd2101e827892bda7
-
SSDEEP
12288:wBm5Ze4/s+FNSrNrnxdrNn6qh9lp9nBwlEWbUzW7UTKVUhRCxeC+:wMHXPSh9dxlNwlaqQKVYRCxeb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FACTURAS-ALBARANES.exe
Files
-
03052024_1526_03052024_FACTURAS-ALBARANES.gz.gz
Password: infected
-
FACTURAS-ALBARANES.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ