Static task
static1
General
-
Target
5-7.eml
-
Size
959KB
-
MD5
eb4013fb3dfb5d67ded18e64fc7c751f
-
SHA1
c65dc1aed1292ea54d1851224c2428840b93c86a
-
SHA256
547dd4396a3f786bfddc6fa2f2748f085b7b024f35d7eafa33d0756c1f618bcc
-
SHA512
430cc042e56b25f53fa40b101502fdb7ed2b63f9e4ae19445355bc47b3f8eb9df3f968460e43f1c89e9de8152bbec83da3da595936d6f1d44248f80dab6c9fbf
-
SSDEEP
12288:UVA2NHwJ5iB2wpkuVvmV6BA3AMKe2NWgaMR5HB1IehHaMSgUEMSBFlZPSxfur3:+vuUB7vmV8raMR5bIeV5xFX6sL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Recibo de pago/Recibo de pago.exe
Files
-
5-7.eml.eml
-
Recibo de pago.arj.rar
-
Recibo de pago/Recibo de pago.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html