Static task
static1
Behavioral task
behavioral1
Sample
VISUALIZAR PROCESO POR PAGO DE INCAPACIDAD; Radicado 20017-70-32142-2024-00611-00; 8902043602.exe
Resource
win7-20240903-en
General
-
Target
fe7947617eca3a55fc8d9efc1105a6e1.rar
-
Size
1.1MB
-
MD5
fe7947617eca3a55fc8d9efc1105a6e1
-
SHA1
2897c57e1ed8f5896b727c621e703af53ef95c79
-
SHA256
46b019d3ecbee2f7cfe951a727e796ef30b1b5196c6cf110b56a1a636bb13bb7
-
SHA512
372b0562cb5e43831b743c9810a65a32dc2d34e233292fa3d2d066b2fe53de43c60bf5dc4d87e91629911fed373c56c0c5483bc7ce2d5ac56fbd61143af85be1
-
SSDEEP
24576:gBCESwFEtJ+bP96njSW7dOa5F9IcGwnxOAF2V0xGNIDL:YCVwmtJW95Za5FFzRY0xeuL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VISUALIZAR PROCESO POR PAGO DE INCAPACIDAD; Radicado 20017-70-32142-2024-00611-00; 8902043602.exe
Files
-
fe7947617eca3a55fc8d9efc1105a6e1.rar.rar
Password: 242612
-
VISUALIZAR PROCESO POR PAGO DE INCAPACIDAD; Radicado 20017-70-32142-2024-00611-00; 8902043602.exe.exe windows:4 windows x86 arch:x86
Password: 242612
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ