Static task
static1
Behavioral task
behavioral1
Sample
Anexo I e II do convite·pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Anexo I e II do convite·pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
c1b7b7726eeef1b25b7a010c88d394479f5b0ce8d0e9abe1fd5529da6a0e0688
-
Size
51KB
-
MD5
29885da8092aac70ef9683295baae11a
-
SHA1
8a20aacfbdc45680b8ba00e1d241fd28ce9c2976
-
SHA256
c1b7b7726eeef1b25b7a010c88d394479f5b0ce8d0e9abe1fd5529da6a0e0688
-
SHA512
13a981fb3bff4ec1fea3d87409546210fc61f1eac12427d2a55329269f1491d315a330811224cf9b0c9bc5d3bfb086bed0961cc77ea06376a66c1ef16d32b391
-
SSDEEP
1536:Knc5CnwC3Zi8xkcJuI9PiUrdbadAb7D3IY3ihi1JUYwK:yc51CpdSKtiUr4dQs0IYz
Malware Config
Signatures
Files
-
c1b7b7726eeef1b25b7a010c88d394479f5b0ce8d0e9abe1fd5529da6a0e0688.zip
-
Anexo I e II do convite·pdf.exe.exe windows x86
bee9d652e25bf42465265f6582df5734
Code Sign
Certificate
IssuerCN=Form_SACO,OU=Form_Unsuf,O=Form_Sunasemina,L=Form_Rati8,ST=Form_LIREKASS,C=TV,1.2.840.113549.1.9.1=#0c1b466f726d5f5468656f6c6f673440466f726d5f4177756e632e466fNot Before30/11/2021, 07:32Not After30/11/2022, 07:32SubjectCN=Form_SACO,OU=Form_Unsuf,O=Form_Sunasemina,L=Form_Rati8,ST=Form_LIREKASS,C=TV,1.2.840.113549.1.9.1=#0c1b466f726d5f5468656f6c6f673440466f726d5f4177756e632e466f0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/01/2021, 00:00Not After06/01/2031, 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
26:1a:7d:77:b4:55:ca:a0:65:3a:6b:31:84:22:c9:41:c1:ed:2f:49:5c:1a:14:c1:36:95:f0:3e:9f:a6:15:09Signer
Actual PE Digest26:1a:7d:77:b4:55:ca:a0:65:3a:6b:31:84:22:c9:41:c1:ed:2f:49:5c:1a:14:c1:36:95:f0:3e:9f:a6:15:09Digest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord584
ord585
ord586
ord587
ord588
ord696
ord697
ord698
MethCallEngine
ord513
ord514
ord515
ord517
ord518
ord519
ord628
ord629
ord554
ord558
ord666
ord667
ord669
ord593
ord594
ord702
ord703
ord598
ord704
ord705
ord520
ord521
ord522
ord523
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord716
ord717
ord534
ord535
ord537
ord645
ord539
ord647
ord648
ord572
ord575
ord685
ord578
ord100
ord687
ord689
ord611
ord612
ord613
ord616
ord617
ord618
ord619
ord541
ord542
ord543
ord652
ord581
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ