Static task
static1
Behavioral task
behavioral1
Sample
CashCat.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
CashCat.exe
Resource
win10v2004-20220414-en
General
-
Target
CashCat.zip
-
Size
215KB
-
MD5
4aab0694033f4bfac1618bcfd8e97600
-
SHA1
97dc096070edc0e8382865ca6c208e15c351ba69
-
SHA256
b9df869f72e198d9767e5aa320be3691e6636ce33ee2148bdfd959cd89b48da1
-
SHA512
95e1b2ce9304f74e6f27e3bb331ff997d1b466ad06545845fd534ba89be700d1d677ae81b6cf6be42f4dcc565022f1529785adf7da41d309600b3cfba70f491e
-
SSDEEP
6144:wOwmcZphphJWElmXkiKrfCbzClwUqvjFIZRfATyCZ8:DjcxpHrlmOCbzCl8vjGZRITyy8
Malware Config
Signatures
Files
-
CashCat.zip.zip
-
CashCat.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ