Static task
static1
Behavioral task
behavioral1
Sample
ricevuta di pagamento.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ricevuta di pagamento.exe
Resource
win10v2004-20220812-en
General
-
Target
3622CE25A3F96EC856E6DCF1FA4416143F21380423765D17127EEDB08790B1B4
-
Size
577KB
-
MD5
698dbb77d23b02abe83c77eef8fe89ab
-
SHA1
ec8259158369f2c2c18cacec6a429a6aa6586242
-
SHA256
3622ce25a3f96ec856e6dcf1fa4416143f21380423765d17127eedb08790b1b4
-
SHA512
d77077955f7ee672e4c360bd48f06fdfc27ed3f05991bf57d05365397af68a059ebde654b830594582822f829812e0dcf5428e2bdd214a05ef5dafea3ac09258
-
SSDEEP
12288:2CvMX0c2NYDjkj0/GQF6xWPvAO/CMz66h/o1pkSgQPzVfoi:p+bDH/GQoIPvAilEDJ
Malware Config
Signatures
Files
-
3622CE25A3F96EC856E6DCF1FA4416143F21380423765D17127EEDB08790B1B4.gz
-
ricevuta di pagamento.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 782KB - Virtual size: 781KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ