Static task
static1
Behavioral task
behavioral1
Sample
Aviso de Pago pdf .exe
Resource
win7-20240729-en
General
-
Target
7cfb37ee421dd4cb297bd754e077319a9c58a3a638f51ab048207fa8af84a2b6
-
Size
557KB
-
MD5
7dba056012a026d747e04ce92ccd4466
-
SHA1
81fcdba16c58c92d891af240eef703305165a9cc
-
SHA256
7cfb37ee421dd4cb297bd754e077319a9c58a3a638f51ab048207fa8af84a2b6
-
SHA512
8158f241eb75546daf3f7ba8120475d694f08e83b6ede2b3f918e5cd869e332d6673521d37752fa2ea86c5456f964cdcf630999f15b45d22edf36d6838c4eb1b
-
SSDEEP
12288:B4OSSg2JNw78lZ1r55lBr+CaCOhm2adeTM/BWYjXq+MSxTYnQQn:BVo2JNw78j1ru3hEeTcWNLeg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Aviso de Pago pdf .exe
Files
-
7cfb37ee421dd4cb297bd754e077319a9c58a3a638f51ab048207fa8af84a2b6.zip
Password: infected
-
Aviso de Pago pdf .exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ