Static task
static1
Behavioral task
behavioral1
Sample
sethc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
sethc.exe
Resource
win10v2004-20220812-en
General
-
Target
sethc.exe
-
Size
49KB
-
MD5
36f276fe6f0d8f4f124f69120eb1cb47
-
SHA1
55a8ec56138e50fef27c0afef66e247bdda7e937
-
SHA256
050e068131d825455011ba2e5f27fbcd4936cea601f5f2b0ff7a3c512c4a0ef8
-
SHA512
c60580c04d32f618f0b25aa7b86685ed1f1cc4966871abf74bcbbf49b9ca7a5411edc112c67a381b52b42e4bdd7ce17a61e61aa20f71db137c180ee350d2e748
-
SSDEEP
768:A4n8Yoeh76ghlxVHATi/w4e1Gw/rw0c6gHC1wSkeAybZ2GfslXcOHyzH2Gzf:XRygn04SGsXGH4wHMbZ2UxOHyzrf
Malware Config
Signatures
Files
-
sethc.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ