Static task
static1
Behavioral task
behavioral1
Sample
d930a3c2235b892f11a97f5d6681c43bec225c76a6eb65924ba218ff5ec84248.rar
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d930a3c2235b892f11a97f5d6681c43bec225c76a6eb65924ba218ff5ec84248.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Segunda_via_pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Segunda_via_pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
d930a3c2235b892f11a97f5d6681c43bec225c76a6eb65924ba218ff5ec84248
-
Size
1.6MB
-
MD5
8e02259f0b174d560f9d5337e1992903
-
SHA1
848233a76b13649e8ac9289e324ff5a66d2fbb98
-
SHA256
d930a3c2235b892f11a97f5d6681c43bec225c76a6eb65924ba218ff5ec84248
-
SHA512
31fe22ed46798ea7a51ddfe3197314ba9f9c767b359ba5e2f3cbeaeb841a825a7979d65ddab700b5ec62089986e10ac166df5106b534f36c885926795d912cef
-
SSDEEP
49152:4O5EA6hJKAbZ2K11saYmRyGcNsrenJKnneqMhJ3nW:4OqLhAAFL1XV8Gc6rensn5cVW
Malware Config
Signatures
Files
-
d930a3c2235b892f11a97f5d6681c43bec225c76a6eb65924ba218ff5ec84248.rar .ps1
-
Segunda_via_pdf.com.exe windows x86
8c797522dbef30d479a79c71abaa4f9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
QueryPerformanceCounter
Sections
Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xivhyzng Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zoeqjliq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE