Static task
static1
Behavioral task
behavioral1
Sample
Segunda_via_pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Segunda_via_pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
698d843f3acfadc2d012e85e2adb3e295307a79859ca51204be59bab79de295f
-
Size
1.9MB
-
MD5
4f56783230f77347beb32f70dee314b8
-
SHA1
fd0df92c3c82e93353bba704ca2bf6e48abacc21
-
SHA256
698d843f3acfadc2d012e85e2adb3e295307a79859ca51204be59bab79de295f
-
SHA512
c31bc1ff80323c01b44aff1411ece66054f3e265641b5ddeb47d27e95712e6b61adff8ceb482cc5ad0e4433b41a3e4f4b6e279638287fe9ab487cddc871af660
-
SSDEEP
49152:5FwYglyBqbkilO4vI1t4qxxSBfuLvIEBv5t/K0Dj2irKp5CO:5rBsc4Q1tBv8av/rD3ubCO
Malware Config
Signatures
Files
-
698d843f3acfadc2d012e85e2adb3e295307a79859ca51204be59bab79de295f.rar
-
Segunda_via_pdf.com.exe windows x86
d64316aca8f69e2636ef0af74aba9f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetACP
Sections
Size: 336KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghzzsheg Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hidlxuar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE