Static task
static1
Behavioral task
behavioral1
Sample
Boleto-09-02.pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Boleto-09-02.pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
2f0ded0d3f28bc318aa68406202c6f35038acde7101344da751712414861b3b7
-
Size
14KB
-
MD5
f9711a8c1f6868afa5b2daab28caa120
-
SHA1
3a90eaf6383aade28b92338c4d505f16e9236d39
-
SHA256
2f0ded0d3f28bc318aa68406202c6f35038acde7101344da751712414861b3b7
-
SHA512
3cc7ccd9359e044a1e67291818bff7e6fba1537ddb26cab57e577a1274fd5a75467aac8c4d575fcd591ff3e10d3f666dd266faee886848307f50fce923ff887a
-
SSDEEP
384:LuxXx9vR9+y+9rQHZn8ESkv5aoJQVWpyb51UqCH9L5g2Z:Ctx9p9ZyrQ5Pn1JQVWpyD9CH9lxZ
Malware Config
Signatures
Files
-
2f0ded0d3f28bc318aa68406202c6f35038acde7101344da751712414861b3b7.rar
-
Boleto-09-02.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 133B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ