Static task
static1
Behavioral task
behavioral1
Sample
Recibo de pago/Recibo de pago.exe
Resource
win7-20240729-en
General
-
Target
02082024_0159_01082024_Recibo de pago.zip
-
Size
630KB
-
MD5
85a10ff58c85b797608829a626b4d186
-
SHA1
29ca352aaaf67f174c013f3bd42e98bcd2aa4d9c
-
SHA256
8781e93f9fababb41b3f06263a4655a4284a09174fb2354f9f1614dc36d724a5
-
SHA512
07392c46b60cdd5f42c8f5c2f0d6b6ff2ca420f5e709b5af2dcca3b96608a8232fafab656e82521ffbb5dfe4d32562fe9cf3ed67d8d5ef8283c24f9ebe2387dc
-
SSDEEP
12288:xqn+uylSVbc6H/69QuZOIL8eCJqbFCDtBlquNdK4XzO2kMsn:4ndylmcv9FeM2BUudbvkMi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Recibo de pago/Recibo de pago.exe
Files
-
02082024_0159_01082024_Recibo de pago.zip.zip
Password: infected
-
Recibo de pago/Recibo de pago.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ