BaixarCapitulos.zip
- SHA256 5900aa01330002a28d9be37977323c31416324ae59a2ecc80aebc5be77faabee
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CampoTreinamento.BaixarCapitulos.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CampoTreinamento.BaixarCapitulos.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
HtmlAgilityPack.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
HtmlAgilityPack.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target BaixarCapitulos.zip
- Size 51KB
- Sample261030-dcdx2adb37
- SHA256 5900aa01330002a28d9be37977323c31416324ae59a2ecc80aebc5be77faabee
- MD5 095c7933b2e79ad369769823775b4313
- SHA1 07c260b8b6a1dd6e9c8587080fd49eedcd983a35
- SHA512 6567931094a9348349e7989ba96b420d909f43a930196c5570100ef4d49cd70291f87dd6c17b6fc46b834d3b2a286e66c7e298b7447955bccedb4c964c095459
- SSDEEP 1536:jbohIfaM64XaMEwEgreK2dgAfRWi4j/IxDdH996V:jvfN6qgwETyApW1jUD9C
- TLSH T10C33F1DD8289EE4E573B0B0D45F4F55083E9081D2A8DD1AE3B880F7E5DDAACA0D62199
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/CampoTreinamento.BaixarCapitulos.exe unpack001/HtmlAgilityPack.dll
File Explorer
-
BaixarCapitulos.zip.zip 51KB
-
CampoTreinamento.BaixarCapitulos.exe.exe 7KB
-
HtmlAgilityPack.dll.dll 120KB
CampoTreinamento.BaixarCapitulos.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e0114ce317b5e6cc51e0ea40239200924fb6f05764966728f1dd92b53ea8b0e9
- MD5 ccdd39efd4fd65c6011d4b4b057cbf88
- SHA1 eaa2927a04fb9d07b3a4a4f34c880ef99463682a
- SHA512 d56c2ce47655c9cc448beaf0efb53e8835de6d3743660baea77f148ad57c1dcef51331733ed1afab663df3b2b381600d57b2a602deddbcb8678c27767652631f
- SSDEEP 96:P/KECilwT36W8RY/6kXS+d8U54bPTZWkjhYbyuO6szNt:P/HnCOW8q/6kXS+dB4bPN7jhY2uO6W
- TLSH T18EF19419A3F81369FDF71F3158F66261137AFA629C3BCA2D24C2518A5E326004922F23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\igor.quintaes\Desktop\Projetos\Estudo\FerramentasParaAjudarColegas\CampoTreinamento.RenomearFotos.App\CampoTreinamento.BaixarCapitulos\obj\Debug\CampoTreinamento.BaixarCapitulos.pdb
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HtmlAgilityPack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a7c75011cf1e474fff19d7bcb1bd12453db338feefe438187c9871e5e727c3a
- MD5 56a910d753ec428ca9ac64f2dce02700
- SHA1 3212c7d2b13b74a6becfe34b4b0df7a404828652
- SHA512 a7aac6aee18a3f25b8d625efef28e2788542ebc4349584f77dc60c72d8332e7b5c6669befd75555b37a03cbc9fa67af9ef7f2f80e3c62c24f86e271ac832eb3d
- SSDEEP 1536:ydzDc1zjnmGyAi81fx0+zz98XYsTPgwigs4fvYwlELb8YcEip7K7YpoC/c:ydXc1ph0+GXYWHY1St/c
- TLSH T1BCC3191062FE473BDAAEB7BED4B1511807B2E526B257D74A4CC970EAD8323404A13F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
127682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Jonathan\source\repos\HtmlAgilityPack\HtmlAgilityPack\obj\Release\HtmlAgilityPack.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ