Static task
static1
Behavioral task
behavioral1
Sample
Bonifico n.4301311110000077/Bonifico n.4301311110000077.exe
Resource
win7-20240903-en
General
-
Target
60352657d5b40d618bca9dd61bcaa201bc22807b07a583dd99a4e6cb8111ded9
-
Size
698KB
-
MD5
2f6e3739216de5d6d5b745fbf6292cd6
-
SHA1
0be5cbdb71f7f074ef0dc451f9ed44a27ce75dcc
-
SHA256
60352657d5b40d618bca9dd61bcaa201bc22807b07a583dd99a4e6cb8111ded9
-
SHA512
d51be84c94a8ef7809344512a287bbcec5c5b1feec8d38e93d0f0adb948d1759c9bd555ef9610589c32f041d41bfe813b3ebfbb7c7b929fc3f74d1777fb3ce16
-
SSDEEP
12288:xnXTCVq2fg8MxvkIYOhHTEPp0r3IPdOH2p7PctDDkAkBd7BZzRCMbg:xuowg8+MIzHTQ0rQOH2p7PeNkBd7jRCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Bonifico n.4301311110000077/Bonifico n.4301311110000077.exe
Files
-
60352657d5b40d618bca9dd61bcaa201bc22807b07a583dd99a4e6cb8111ded9.zip
Password: infected
-
3fc4e354a515ea46c954872a1752ed83d84723d85fd1d132f1f0da7e2168ba2c.zip
-
Bonifico n.4301311110000077/Bonifico n.4301311110000077.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 845KB - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ