Static task
static1
Behavioral task
behavioral1
Sample
RICHIESTA D'OFFERTA A EDILGRAPPA SRL_PDF.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
RICHIESTA D'OFFERTA A EDILGRAPPA SRL_PDF.exe
Resource
win10v2004-20230621-en
General
-
Target
064632b969185ca5518a8799981a105b.bin
-
Size
521KB
-
MD5
7116ef2fa16a62e7143109959b5a55e9
-
SHA1
452fee9671f0e13860584f3a27296d5c93139c4d
-
SHA256
9cfee0c89c422e7d3e1b29f5a591605d5e1ca72dfe35c97c2beaf72875190a2f
-
SHA512
b344a2aa95d2d8fe26afa3cc2c766b160a3af10115e7c884de093bb8475e8fe0f1f1ee258b9756f9052df36531373a7c84dce8279f46034da9e0bbc3d05c9129
-
SSDEEP
12288:NU5MbOMIcYeYoFpcsPv6TJU78KLZlG/QQE+hs:NUKbLSeL/dPvOKLi/hy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RICHIESTA D'OFFERTA A EDILGRAPPA SRL_PDF.exe
Files
-
064632b969185ca5518a8799981a105b.bin.zip
Password: infected
-
c67bb975725eb686c0f0f3e3f18b80259cf1251cecee48db1966e7c9d285c173.z.rar
Password: infected
-
RICHIESTA D'OFFERTA A EDILGRAPPA SRL_PDF.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ