for Luis[.]rar | Triage

Submit
Reports

Overview

overview

Static

static

Foundation.pdf.exe

windows7-x64

Foundation.pdf.exe

windows10-2004-x64

Interview ...w.docx

windows7-x64

4

Interview ...w.docx

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Foundation.pdf.exe

Resource

win7-20220901-en

redline 25.9 discovery infostealer spyware stealer

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

Foundation.pdf.exe

Resource

win10v2004-20220812-en

redline 25.9 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

Interview with Luis(Cryptopop) preview.docx

Resource

win7-20220812-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

Interview with Luis(Cryptopop) preview.docx

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

General

Target

for Luis.rar
Size

612KB
MD5

3c82ecaac821b11a60ce0a77a80e66fd
SHA1

f4c8603fdf046ad9c35019192f6c71e1f1ca983a
SHA256

cc03325caa93ead4a46e928172c4bc65829543bf32de050f83c1f9e63b0d4858
SHA512

df4c6a33f8fedbb5155a92047f7320446a6e2769dcfc2a17257fca5cde1d239136134d9d2a58a1a26d807f5274b43c96abbae0f4aeb8e35c665f9d4d925df972
SSDEEP

12288:0z5IDU8NsTJdb0Zr6RJIRlB9g+oksGhRPgpeor5U68qq:6BJd+6jSlDbsGzPYU68qq

Score

N/A

Malware Config

Signatures

Files

for Luis.rar
.rar
Foundation.pdf.com
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Interview with Luis(Cryptopop) preview.docx
.docx office2007

© 2018-2024

Terms | Privacy