Static task
static1
Behavioral task
behavioral1
Sample
58413be3d0f3fecc47a190dc12bcd9269b878e1d5d707c55afb4127179895a6a.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
58413be3d0f3fecc47a190dc12bcd9269b878e1d5d707c55afb4127179895a6a.exe
Resource
win10v2004-en-20220112
General
-
Target
58413be3d0f3fecc47a190dc12bcd9269b878e1d5d707c55afb4127179895a6a
-
Size
552KB
-
MD5
0afc9295c73529b7acc0ba3c6690a2e3
-
SHA1
5349d645e23d0a000bb974a3b1a598650e3198a5
-
SHA256
58413be3d0f3fecc47a190dc12bcd9269b878e1d5d707c55afb4127179895a6a
-
SHA512
7a0bcc6b044b810bf92159260f104e6be8c88085e36d74e6cdb8e6cf94d8d62a91c7bf5414689c70f93671700b138f5ed77a46345113106bec6303b85c9b2c00
Malware Config
Extracted
hawkeye_reborn
- fields
- name
Signatures
-
Hawkeye_reborn family
-
Processes:
resource yara_rule sample m00nd3v_logger -
M00nd3v_logger family
Files
-
58413be3d0f3fecc47a190dc12bcd9269b878e1d5d707c55afb4127179895a6a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ