Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_MAYQTRA031244PDF.scr
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
QUOTATION_MAYQTRA031244PDF.scr
Resource
win10v2004-20240419-en
General
-
Target
Ordine n. 2.591 2024.z
-
Size
73KB
-
MD5
a7746abaad4de43fea9f15b0357634a8
-
SHA1
79bbbdfe0d174b6810f69cbee9618fb63b37b535
-
SHA256
4a3f4639f8aff76eedf813f21ce781c50f41f821a9dd78108ad72be5cc5d54f5
-
SHA512
a14fbebfc8a873da7264103dcb0063b70622fce902cd753997fe9dab0c4f90886a529b695925593d1347299223d65565f80c59911a33bb40ba02e211b1b09d0c
-
SSDEEP
1536:4l2Ug1T93vjCDEE0COO+PuL495WcsrYOkwnAl8ne5bqYftSz:4l2Ug1T9egEqOAa41sr7ASe5+YU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION_MAYQTRA031244PDF.scr
Files
-
Ordine n. 2.591 2024.z.lzh
-
QUOTATION_MAYQTRA031244PDF.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ