Static task
static1
Behavioral task
behavioral1
Sample
PRCTool.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PRCTool.exe
Resource
win10v2004-20221111-en
General
-
Target
11d673d3bb7a5ed7e80caa5220d1eee67c1f24594e492d1d2008d425fed37d54
-
Size
94KB
-
MD5
055dba3444f3987aa37d4c5e00a5645f
-
SHA1
e409ba0fb64fb9a33b4c6eec86c8a60d17aa42c7
-
SHA256
11d673d3bb7a5ed7e80caa5220d1eee67c1f24594e492d1d2008d425fed37d54
-
SHA512
7ec3ec888b25cb8f214a360eaf90d045a74959e357c415149f590325dda9d87fc722f682c63569e9ec2962d4797c159068f1e12de113871b66ec18297d4414ab
-
SSDEEP
1536:3/jb2qCk1wLR0z991wK54d5Fk+vdO5zYEXn/jW6Negsb0soUg2X4LPYp:3fVCfLREIu4d5Fk2dO5zY+i6Nezb0Hez
Malware Config
Signatures
Files
-
11d673d3bb7a5ed7e80caa5220d1eee67c1f24594e492d1d2008d425fed37d54.rar
-
PRCTool.exe.exe windows x86
98cd3ec01c170b9cbd01ae3329f6d90d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.text Size: 70KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE