General

  • Target

    processo-judicial.zip

  • Size

    13.5MB

  • MD5

    d8ad517c9da9e4b3aa0e935c785b6d49

  • SHA1

    3974dbf46db4c7015f7e3ab94bab988abc4a0114

  • SHA256

    0643be7e3ecb2129d770e8ebea090b2a1c6af7dd1b800aaf85fafa24c6718b51

  • SHA512

    fc27a0bb9ac2b101604a7c51b65841b93d85b6e3d9fca41bf801e2a4492f6e1176cb8c866bd004891d265487e63bdb00a37bac5c1f9a518b331d49743f2783b5

  • SSDEEP

    393216:7w6pygjx5nzbpOUGJSIBGbw3z0Y/VJMR9Z:M6p5l3LGXBzrnMRb

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • processo-judicial.zip
    .zip
  • MxAddonsMgr.dll
    .dll windows x86

    0435e918334518e1a10a8b46ae2adea0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxCrashCatch.dll
    .dll windows x86


    Headers

    Sections

  • MxDb.dll
    .dll windows x86

    ac50d0258bacfb9ab63d02ad57896a47


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxEncode.dll
    .dll windows x86

    e09dc13176d29aba0a59c0d0844ef881


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxFilePackage.dll
    .dll windows x86

    636743c46ca67afd30f8d083a751e4cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxHttpRq.dll
    .dll windows x86

    d66d221a9af642b9aa5938ba96594ca8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxIPC.dll
    .dll windows x86

    333d01d77e99bf78defda53085d9bca0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxMsg.dll
    .dll windows x86

    543ceb7b093a374a3e586e4161e556fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxUI.dll
    .dll windows x86

    5b90aa11e36842984d9bfb97a4f2c100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MxXDR.dll
    .dll windows x86

    539d76003763858a3a0cf745c18109c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Processo Judicial.exe
    .exe windows x86

    aa676fc326db3a7b32d862d794d9df69


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mxver.db