Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JUSTIFICANTE PAGO.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JUSTIFICANTE PAGO.exe
Resource
win10v2004-20250314-en
General
-
Target
JUSTIFICANTEPAGO.exe.zip
-
Size
59KB
-
MD5
df5d720af416602c9db6369224f4e96f
-
SHA1
934e61528358e9ecc68ee4c983648c744587119e
-
SHA256
99d51eb9f2f98ed2de0134b9624a06a7f6102b91dadb0525db661751aff44b7a
-
SHA512
3ca23591b79e46bd48c542c47227bc68861b2b03b1d3bca53d8ca34a2968d24cd464dc9f1112d2692757facc23bb54a0b58d9bd0f949d4a049139238cae6a3cc
-
SSDEEP
768:C0lp5pCYQgQwbvEHxIEYKtyIUYUMBfYbB8rJEoZjlVc/0ne+IfcxzN3PfxE2XR0K:953QXRIElUPmYt8DJrIfcv37Bp1348mO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JUSTIFICANTE PAGO.exe.bin
Files
-
JUSTIFICANTEPAGO.exe.zip.zip
Password: infected
-
JUSTIFICANTE PAGO.exe.bin.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ