Static task
static1
Behavioral task
behavioral1
Sample
Copia_de_Pago__BancoEstado__pdf.scr
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Copia_de_Pago__BancoEstado__pdf.scr
Resource
win10v2004-20240508-en
General
-
Target
Copia_de_Pago__BancoEstado__pdf.scr
-
Size
195KB
-
MD5
a0891b1792db9eb3512e51663411c0fc
-
SHA1
435ed98664688f71e47533126dadcc397c13c1e6
-
SHA256
79a8fc24694a5d1b3a0e8a931f251774a485f1e0ddc913e8605d20ceebbc6e49
-
SHA512
5ad8ceb84d01e478f9ae6afaa1976724d7cf24f0b0b19ce95e775911923557da44003b212ebec0a6bdb7a498878f5ea5ec536ca6c1c58b67eb153b89197e6b3f
-
SSDEEP
3072:35weZ6/MaaA1qtpD1rbQz+oYadrszUfU6CwtskQO8KWbjHbmO+yHto:6eQMrp5Qz+oYadaUfU6CUskH8hGO+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Copia_de_Pago__BancoEstado__pdf.scr
Files
-
Copia_de_Pago__BancoEstado__pdf.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ