Static task
static1
Behavioral task
behavioral1
Sample
Factura_43822_de_America's_Custom_Brokers_Inc_16396.pdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Factura_43822_de_America's_Custom_Brokers_Inc_16396.pdf.exe
Resource
win10v2004-20240508-en
General
-
Target
53a600ecf4b9dfba8195396d5f0a35fb72a7b387328c258481916588f9dd9025.zip
-
Size
631KB
-
MD5
c90617817c7740993bc21af1285069c1
-
SHA1
091445128a25a71c79035a48f73fa021eeb6ee78
-
SHA256
53a600ecf4b9dfba8195396d5f0a35fb72a7b387328c258481916588f9dd9025
-
SHA512
ff2fa0ec83db0820d576f2b93772fc59b881f790c1f0c964a02bf5c245a854cb8637eb7dedc6600a7ad3bde5dc6261f740515ee2d089c68eb44798fd7b4a9ca4
-
SSDEEP
12288:XXmbl5uC9Ovj3vayPft20bt67fhxsM1oAWxyU1L0ZhMqDROYb7rh0xc:nmbLJOvzSy9ptqsLLqDgYb7rh0K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Factura_43822_de_America's_Custom_Brokers_Inc_16396.pdf.exe
Files
-
53a600ecf4b9dfba8195396d5f0a35fb72a7b387328c258481916588f9dd9025.zip.zip
-
Factura_43822_de_America's_Custom_Brokers_Inc_16396.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ