Static task
static1
Behavioral task
behavioral1
Sample
ordinul de cotatie.exe
Resource
win7-20240221-en
General
-
Target
ordinul de cotatie.rar
-
Size
648KB
-
MD5
7fa22f47f43f5f5f966a7487d87457f9
-
SHA1
2deefbbebd686979db281babf8dc4b4eed0226c9
-
SHA256
5be0ccfa2a798666d60144319d4d2ab437b31f87dbf62a3b656ec12ba6777bf5
-
SHA512
3966c3c9d2ba55c87842fcd00c6eba9f62c4cabb5566d38b62a23cdbaf4093c3396c452d23bbeef3f899c72cf044e5a60c37ef7f3c96d13a716760a822e8d109
-
SSDEEP
12288:4y3H4t6Go5b/iG+cfRTdRn4jjHtQWRZmWpt46cZ7lwDPUHgJ/C0sxZbkroce:4y+c3+mTdRIjtnLH67lwDPq8/CVZYLe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/ordinul de cotatie.exe
Files
-
ordinul de cotatie.rar.rar
-
ordinul de cotatie.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ