Static task
static1
Behavioral task
behavioral1
Sample
COTIZACION/COTIZACION .exe
Resource
win7-20240611-en
General
-
Target
04072024_0302_03072024_COTIZACION.rar
-
Size
638KB
-
MD5
b37b6a1e280c16364dff14bd5695d839
-
SHA1
cbeebebf5acc0e59f8aaa08a70a919fc653e83d7
-
SHA256
086ad06e468a4ed73f2841b05437fe82074cf204293e1aa9bdfb809d9b4ea741
-
SHA512
22476837a9f3d658f9fadedb1363f434d1fd3370141a5194846dd697b0323d35585344e93336586ac2e319a15e578c6f256bf52ef537ec608c3eee8e6a0ae02c
-
SSDEEP
12288:jEJtOv1aT1u3jTB+3xZWwaOrfBuB5xhC5aIyYfHFo7VImB4DunQ+hv8XOzJhBe:4JYvATI3jV+TPaOrfBuBGaCflo7oDGfW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/COTIZACION/COTIZACION .exe
Files
-
04072024_0302_03072024_COTIZACION.rar.rar
Password: infected
-
COTIZACION/COTIZACION .exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ