General
-
Target
output.exe
-
Size
41KB
-
MD5
7b973b3620a0f3133628eb6cf36936f7
-
SHA1
5939d5fd2c80bebcd3a4aa03d2b189e72b310e2e
-
SHA256
86bf48da0914ac30d70ffcfb1ac1a7b80c71865fc2d833c736e3106d6127034e
-
SHA512
e3c23c3b31a70ad6f8e987ab7a254091f5390fdd735841b9c1c75d2c5adfbd4faa2429d69e8a569e947ea0a99ea373148a72001c70dd3cc0bf18a7740a24cfaa
-
SSDEEP
768:IscaIiIqfT6axpDXswwuZke/WTjIKZKfgm3EhTR:Pc1ofnxUe/WT8F7EdR
Malware Config
Extracted
mercurialgrabber
https://discord.com/api/webhooks/1020041526010716201/iye2Phh7x3S59TY05gQUrNNAH-Gy4M4yQmEvGh5Cf5DYoyAgd4xlrN3NY3c582oAgEwY
Signatures
-
Mercurialgrabber family
Files
-
output.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ