Static task
static1
Behavioral task
behavioral1
Sample
Calendario dei pagamenti.exe
Resource
win7-en-20211208
General
-
Target
2ec8f4b17dd08b0d95db7276fc3b09cf798ea16c46e6070280e44a98c8a4beef
-
Size
280KB
-
MD5
a75e626d8ec0beb8e8028ffc45c5ebbb
-
SHA1
8bcaf83d423cff3d31a9bac51a4bee19cac2e5a9
-
SHA256
2ec8f4b17dd08b0d95db7276fc3b09cf798ea16c46e6070280e44a98c8a4beef
-
SHA512
3a9db4b192e3c42cd226c1947fa9bf5834f3f51fd782cdf8dd62d762e536d3df2e9041e88abce2fc5fb6d9286dfb86072d78b06133e6830ae12e185e49d221eb
-
SSDEEP
6144:C8rCpB4fpWamQlF7fjr8q94XPpLnKdzqMIGeUdaPZSuluaX:vCpBWf7fjIO4F6zqM1NFuY
Malware Config
Signatures
Files
-
2ec8f4b17dd08b0d95db7276fc3b09cf798ea16c46e6070280e44a98c8a4beef.iso
-
Calendario dei pagamenti.exe.exe windows x86
43f1b4fb55ffa0f3576d845e7070130e
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
rewind
fwrite
fread
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
rename
fflush
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
strcmp
system
fseek
remove
__setusermatherr
fclose
_putch
_getche
fopen
clock
ftell
_adjust_fdiv
exit
_getch
kernel32
GetModuleHandleA
SetConsoleCursorPosition
LoadLibraryW
GetStdHandle
GetStartupInfoA
urlmon
UrlMkSetSessionOption
RegisterBindStatusCallback
CoInternetCombineUrl
URLOpenPullStreamW
msvfw32
StretchDIB
avifil32
AVIFileAddRef
AVIFileInfo
AVIStreamInfo
EditStreamSetInfoA
resutils
ResUtilGetAllProperties
ResUtilStopService
ResUtilSetPrivatePropertyList
ResUtilEnumPrivateProperties
ResUtilGetSzValue
mswsock
TransmitFile
GetNameByTypeA
GetAcceptExSockaddrs
dn_expand
wsnmp32
ord100
ord900
ord205
ord220
ord202
ord101
ord103
msi
ord130
ord71
ord154
ord111
ord153
ord166
shell32
SHGetMalloc
ExtractAssociatedIconExW
ShellExecuteW
DragQueryFile
ole32
CoInstall
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ