Static task
static1
Behavioral task
behavioral1
Sample
Pagamento,jpeg.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Pagamento,jpeg.exe
Resource
win10v2004-20230220-en
General
-
Target
b24f91678b1ea52dfb9b6b2ed16cb5ad6cf9dea8b62788ebf07013473be26469.zip
-
Size
721KB
-
MD5
6bd7be7946bc85720c40e8a9f174f0de
-
SHA1
251ed23a0a852d8fb5be3f9784b180a1bc73b166
-
SHA256
ffaaea95eb209c78be33b54c3f7a8fde11636a68622e9c941817e1fb95356b77
-
SHA512
f20b075fe0fffab773a4e2f2fe1f517a2455b5c2473223c71fba9f4f213e84c665259190baaf4bcde37ec1ba5644b793e27ebf4d3d21e73b684cffdacecce9af
-
SSDEEP
12288:x8cNng2w+u2fc01EwmlXsKvyQ6XCT1C2ccdMY5HcQrxq1HTshkyLu8kW:xTNng2c4cjXTlYCY25MY58aq1HwtuLW
Malware Config
Signatures
Files
-
b24f91678b1ea52dfb9b6b2ed16cb5ad6cf9dea8b62788ebf07013473be26469.zip.zip
Password: infected
-
b24f91678b1ea52dfb9b6b2ed16cb5ad6cf9dea8b62788ebf07013473be26469.img.iso
Password: infected
-
Pagamento,jpeg.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 855KB - Virtual size: 855KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ