QUOTATIONREQUIRED_Dafarra & Seves s[.]r[.]l[.]pdf[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATIONREQUIRED_Dafarra & Seves s.r.l.pdf.z
Size

631KB
MD5

c0cfeb5d65c34f2dc8e7732e9fb0c8a6
SHA1

a9c2ea652dbdb8088f80910e1dcb923dbec4de48
SHA256

d3ee1f0d6b83a138253a69fd5f0b52a4f343aa22aebbcdedd746db27ca7d9311
SHA512

1dbc950ee83615bee2d4633adbdaa89688bcd0b260f3447e77db915337096b3e5e4cab99f6633be13499bb14c417a48439e94329d800ca536524711b148d7b9c
SSDEEP

12288:rujeri6iT7tQfKTpxZCPBOV+/hXNZkai1gNPHhKuagaeMFbUFEnsnU1:SvVT7tqyxZLOhdPi1u3ap+F7nY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATIONREQUIRED_Dafarra & Seves s.r.l..exe

Files

QUOTATIONREQUIRED_Dafarra & Seves s.r.l.pdf.z
.rar
QUOTATIONREQUIRED_Dafarra & Seves s.r.l..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ