Static task
static1
Behavioral task
behavioral1
Sample
fakewinlogon.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fakewinlogon.exe
Resource
win10v2004-20220812-en
General
-
Target
fakewinlogon
-
Size
110KB
-
MD5
7cb8e6a5de20a83feb32f36ce7452cec
-
SHA1
e4dbcb728335d42372210beb39e78d224ae568fb
-
SHA256
aa268786785f9a540f49992516d6b35e3c7aa8e083836b2cb0bd6014a2c17985
-
SHA512
41899936677bd7448e164cb0696b94efc59d8a9619b367e69c33b1f4fd9167caed21f4a2a30203af656465d86deaaf146336c01c845d42e4312780ed45987732
-
SSDEEP
3072:T/WthiUnsIJedahYiXb3k83fTrP9gmKotWBo/ryMb:T/gh3Y/
Malware Config
Signatures
Files
-
fakewinlogon.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ