Static task
static1
Behavioral task
behavioral1
Sample
LISTA DE ORDENES DE COMPRA__PDF/LISTA DE ORDENES DE COMPRA__PDF.exe
Resource
win7-20240705-en
General
-
Target
03082024_0116_02082024_LISTA DE ORDENES DE COMPRA__PDF.7z
-
Size
638KB
-
MD5
807192b62e13fec2a74fdbd69de041cb
-
SHA1
fcbf0d628fae7c3e6ace884a4153d261b2613633
-
SHA256
0a3e4954b4046621f08d58d979f486025eafdac0ffe034325c1991f7341409b5
-
SHA512
0d7472a239b40b524d4a9d9ac62ddc6242f44e64853ab2aef292e3683073404655f360e8c2b8adb6e8a2482856a4e92868c02dc66e7859bd07f1ebd7e2bde1bc
-
SSDEEP
12288:EkgGXKN+4bcfxlMyLKDgBHRIXaJBf38hFSbRtpHwiibbdUPYkFEfNPwZJt:4OI+4bcplYkRW+t+Q9tpHwiinaEfNIbt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LISTA DE ORDENES DE COMPRA__PDF/LISTA DE ORDENES DE COMPRA__PDF.exe
Files
-
03082024_0116_02082024_LISTA DE ORDENES DE COMPRA__PDF.7z.rar
Password: infected
-
LISTA DE ORDENES DE COMPRA__PDF/LISTA DE ORDENES DE COMPRA__PDF.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ