Static task
static1
Behavioral task
behavioral1
Sample
PO202104-114 - APQ Comercial Apoquindo,pdf.exe
Resource
win7-20240903-en
General
-
Target
55f69e37566744971c9c95d0b4dbf05757900786e29788f25a8c0824e7c1e8cf
-
Size
232KB
-
MD5
f5ee233e004e5a9fa773bc8022d4b381
-
SHA1
b138aebf665ff6ba5105d037e4b5639a2863ef3d
-
SHA256
55f69e37566744971c9c95d0b4dbf05757900786e29788f25a8c0824e7c1e8cf
-
SHA512
ae37e115c6e8f3fc25cb42ed58a3b67eb96d579c4ddab2e675d1afd1950724b4ff346e20b66206021b2515c8b3a82c619e0b6a1bbf9b93d99cf8fbea3515c14f
-
SSDEEP
6144:M3RLZ/5MaJMdWCMLIHniJiePh+HX0Abitu1aUm:YLZxMaJlPLICJiePC/bitkal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PO202104-114 - APQ Comercial Apoquindo,pdf.exe
Files
-
55f69e37566744971c9c95d0b4dbf05757900786e29788f25a8c0824e7c1e8cf.zip
Password: infected
-
636acd22b45e1e62123659019ec58b9be944b277d54be7e1e74bf588801c3a65.7z
-
PO202104-114 - APQ Comercial Apoquindo,pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ