cexv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
copia de pago.pdf.exe
Resource
win7-20240705-en
General
-
Target
copia de pago.pdf.exe
-
Size
915KB
-
MD5
db416547d92e1f2179131d797be72cb8
-
SHA1
2d8d19b6654dd949837c1ba2d1974a8f3f58ddb0
-
SHA256
ee6a1171d804498d93b3877e1649a3f0075ffad676875c875e4778823323692e
-
SHA512
b807d0862e77548a8763e7b074d4fed1aa8c6a4f496aa335ab23b8096ff43acf7d0e422aa549ba8271d2758b60d321965035d6107b3e56eb3f0f0ef697b1a8fe
-
SSDEEP
24576:0xxC/qaSupSzqntnSCkaQ2M3QIpU0n8KpJ6MKLuFcK:0viUupSzqnt90UIY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource copia de pago.pdf.exe
Files
-
copia de pago.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 910KB - Virtual size: 909KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ