Resubmissions
31-07-2022 06:49
220731-hls6jaebgm 10Behavioral task
behavioral1
Sample
dcb0b1dbf63576f8aaafda01590cd895149aa4bf3c0572eb56f98eda0e336328.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
dcb0b1dbf63576f8aaafda01590cd895149aa4bf3c0572eb56f98eda0e336328.exe
Resource
win10v2004-20220721-en
General
-
Target
dcb0b1dbf63576f8aaafda01590cd895149aa4bf3c0572eb56f98eda0e336328
-
Size
110KB
-
MD5
d0896b51656cdb77ea031ef845a65f9d
-
SHA1
99e322b98a5a682d5f89f0cce5d56ec423692df3
-
SHA256
dcb0b1dbf63576f8aaafda01590cd895149aa4bf3c0572eb56f98eda0e336328
-
SHA512
107aff672e4718faff26f3660e622d99e64e6ed0939ceb2ca59a57dcee91ddfce091e5cfb9aaa8cec1d13d1ede9a71a56a83401643043cab4d8b6174e82767d2
-
SSDEEP
3072:QgDzI3tr+3VTgc9+4p0LlV8DO+HmkMqtLGl1:Zctr+3VTk3liDLH
Malware Config
Signatures
-
404 Keylogger Main Executable 1 IoCs
resource yara_rule sample family_404keylogger -
404keylogger family
Files
-
dcb0b1dbf63576f8aaafda01590cd895149aa4bf3c0572eb56f98eda0e336328.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ