Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_JUNQTRA031244�PDF.scr
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
QUOTATION_JUNQTRA031244�PDF.scr
Resource
win10v2004-20240508-en
General
-
Target
RICHIESTA DATI PER BONIFICO.z
-
Size
92KB
-
MD5
2cf42871445fc24e380a7ae16409b343
-
SHA1
65739b56d1302209379fef11e07a310ab9e5d989
-
SHA256
403b566c61aa2c3f2bf7a521f6af6f9987ad2fd7349fef6740fe4829db86415c
-
SHA512
efb209b26f4a5024b7cd8f60c8bbe91b08cc578701e665e2ca3343477604baac459bbdff045aa1b1f5b865041abbb4f280e3aeab6bf3b5720fe7d38a479f5ebf
-
SSDEEP
1536:drldFWOUKOm3g97yQUKL2C7eYHuCapkMrsZaHU2IY0p+oCN8r7ofeDDKzBG:ddzUIg97D7xZ+U2WPZrkeD+zBG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION_JUNQTRA031244�PDF.scr
Files
-
RICHIESTA DATI PER BONIFICO.z.lzh
-
QUOTATION_JUNQTRA031244�PDF.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ