Static task
static1
Behavioral task
behavioral1
Sample
abcd49e9a9b02933f7b0f14e04311cf889e255ac000b761a0bbd5765476a8cd5.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
abcd49e9a9b02933f7b0f14e04311cf889e255ac000b761a0bbd5765476a8cd5.exe
Resource
win10v2004-20220414-en
General
-
Target
abcd49e9a9b02933f7b0f14e04311cf889e255ac000b761a0bbd5765476a8cd5
-
Size
80KB
-
MD5
e5c8e5c4db329c1ec08e8de34497a11e
-
SHA1
d830675288b02f6d7c1442441e9fdc2e2243c3d6
-
SHA256
abcd49e9a9b02933f7b0f14e04311cf889e255ac000b761a0bbd5765476a8cd5
-
SHA512
02fe0d35e41d7ffba2f404f440da5bd2c675651a420697e2d4570ac9898496ba30a0275f1eac7ee703a6c0e8604a8967396ad025463c4cc04cdc37dfe0c7f4f9
-
SSDEEP
768:Y35Sn3WRzCbdV/fpJ20YNx5IUM7AbyTMlXW+5fdS8W+S6duxY:YJSCc/fPYL5JM7WyTMPhxdF
Malware Config
Extracted
hancitor
2901_67231
http://twereptale.com/4/forum.php
http://charovalso.ru/4/forum.php
http://verectert.ru/4/forum.php
Signatures
-
Hancitor family
Files
-
abcd49e9a9b02933f7b0f14e04311cf889e255ac000b761a0bbd5765476a8cd5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE