Static task
static1
Behavioral task
behavioral1
Sample
FACTURAS-ALBARANES.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
FACTURAS-ALBARANES.exe
Resource
win10v2004-20240426-en
General
-
Target
c2e28196f1e712f7e348ae1bd966e178.bin
-
Size
600KB
-
MD5
63732d850ff97c5461a82e29de994435
-
SHA1
bf53591fc93f3c707471d30ea4cb5737a88d3008
-
SHA256
fedd2106266cd2ab3f1ec82ced6d79fd116d9c9ceb6e31b6327b6ed67e54c423
-
SHA512
93b5f2b43c6678d223bf7d3efd3f0cb460fcb8e4b62da602f2046aa6a16971a770b95556d64ad1119339656fe5ecd4767c92a23ad64607afd7be608195350ba6
-
SSDEEP
12288:yMiRf48C9wkZjKgKXksEpT9eK6yNLCW58mvBMPq/JHtpHo9Q4+hXfp8oXAEQz3Rd:yMC4j9JKgzsET9enwCo8CMPq/fuu3AEq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/FACTURAS-ALBARANES.exe
Files
-
c2e28196f1e712f7e348ae1bd966e178.bin.zip
Password: infected
-
412e51baaa8287ab5581f7403af5c44e137c2e3eb4dd747bebeb9c0e5d4679df.gz.gz
Password: infected
-
FACTURAS-ALBARANES.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ