Static task
static1
Behavioral task
behavioral1
Sample
CotizacinP13000996pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CotizacinP13000996pdf.exe
Resource
win10v2004-20241007-en
General
-
Target
CotizacinP13000996pdf.exe
-
Size
705KB
-
MD5
cd3a6f4e87632d933a99502e32a34b73
-
SHA1
0033645d2b94cf4e56c8ea6eb8508e3c2ee77b11
-
SHA256
b7c70cd300732d7faad3e5a898a93b0dbff2a62ec9555eef0997af34baa721ca
-
SHA512
5bb5961f2c0a22ac96ddbf6865ca73d308da2a9d0d04b4265debeed062ff56e7cff9cee8bf428f027f0849f27d01d84fa9b0e0b6902e8b594ceac2b7da73dc0b
-
SSDEEP
12288:uyU5mU+8o1XTsMGQ8rbHJwVKlwIuyrxLr45MF1R43MtK6jO7i1DIYop:vUx4TXGtHFlwIvN05MF1Tj4i1DMp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CotizacinP13000996pdf.exe
Files
-
CotizacinP13000996pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 699KB - Virtual size: 698KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ