Static task
static1
Behavioral task
behavioral1
Sample
Orden de compra.exe
Resource
win7-20240419-en
General
-
Target
Orden de compra.zip
-
Size
480KB
-
MD5
b4076a68d2543df6f3a96721ab83704a
-
SHA1
4a48b357889613833ab59a2f7caa8ebfc89dc221
-
SHA256
fb86f876dd9cb1fb4302df15630f365382006b74ab4f0efcae8269bbd5e0543b
-
SHA512
b6b2e42841a8f565daaee9ab5bcd7ad22964a37edcb68bf04c50e842101d7568a843356f12af227cbbe3bf7685b859b7d24b1011d18fcac03c689c53e5f4d995
-
SSDEEP
12288:sL07ZR9E5xumElybFzYvbycJwa7YhdfKxbzZwL:sgR9E5UmElybFSb/Jnjbz2L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Orden de compra.exe
Files
-
Orden de compra.zip.zip
-
Orden de compra.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ