Static task
static1
Behavioral task
behavioral1
Sample
HSH CHEMIE SRL cotatie estimativa 13102023_PDF.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
HSH CHEMIE SRL cotatie estimativa 13102023_PDF.exe
Resource
win10v2004-20230915-en
General
-
Target
15102023_1908_13102023_HSH CHEMIE SRL cotatie estimativa 13102023_PDF.img
-
Size
312KB
-
MD5
69ee70f699f0a209c3ec1b1f10b32a89
-
SHA1
80d3a262175ca73b551e45d2d9f7d82cd15076b0
-
SHA256
4364eeb6a7a9f6de1a56bbc7614a0915e7f49b349c64652efce391b15747dab2
-
SHA512
5e468cdf495448c511123e6793059738a8270a7809111384937bd60701b475d4e59af8dcd07c344a1e4c29aab51ebb2e827d8c604198829cad0444bc2798d54f
-
SSDEEP
3072:mByJXl+K4e3sHrrGeitukxf2/3KWfpxLL:uQ+KOGeFkHWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HSH CHEMIE SRL cotatie estimativa 13102023_PDF.exe
Files
-
15102023_1908_13102023_HSH CHEMIE SRL cotatie estimativa 13102023_PDF.img.iso
Password: infected
-
HSH CHEMIE SRL cotatie estimativa 13102023_PDF.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ