Static task
static1
Behavioral task
behavioral1
Sample
Copia dell'ordine di pagamento.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Copia dell'ordine di pagamento.exe
Resource
win10v2004-20220812-en
General
-
Target
Copia dellordine di pagamento.tgz.gz
-
Size
306KB
-
MD5
0a5967e6b0f29aed16af5f8a4f84099f
-
SHA1
0c42c4c8adb321b3f5b5118261ddc082f139925c
-
SHA256
76142d7f4c863e413429c8afc13aebf9f0afeddb3be14ee033ba1bd2e89b0741
-
SHA512
4d7c388b0c88dc7088c95d965dd96450b729d9674073dc755e65752ca7b02c33654ac6e18ba9107dd808046602f589a6e038e7a66a648b4da717873cd328bc54
-
SSDEEP
192:5GovtAWTIqGJmakfCLOYRy3fwObp7/c44ZVTODXxh:4AAHJCqivRVS4h
Malware Config
Signatures
Files
-
Copia dellordine di pagamento.tgz.gz.gz
-
sample.tar
-
Copia dell'ordine di pagamento.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ