Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_JUL7FIBA00541·PDF.scr
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
QUOTATION_JUL7FIBA00541·PDF.scr
Resource
win10v2004-20230703-en
General
-
Target
PROPOSTA ORDINE.z
-
Size
32KB
-
MD5
8d0de5854156eea2f7bc481da2c7a801
-
SHA1
77a535ebcd41434037be5236c9d5d0cb25aadd90
-
SHA256
aad945bf41ee807787d75871578f6c08d5fd6138210f6bb6737830091280c70e
-
SHA512
2e74688b3d7ff29bc0db19abb47abb34ca312afcbad4ada7f0a8af1abdbe761ac70f106c1096575a1507022758fe8c8485c0e89ab8e2a1ce5cc523d5f50bb906
-
SSDEEP
768:RUSHab2zuW5bOwnrO5th4yeOy/kaH3WpIMiexFRH0/ce5ILf:uSy2/5Swyv4yukBpeEh0O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION_JUL7FIBA00541·PDF.scr
Files
-
PROPOSTA ORDINE.z.7z
-
QUOTATION_JUL7FIBA00541·PDF.scr.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ