Static task
static1
Behavioral task
behavioral1
Sample
WireTap.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WireTap.exe
Resource
win10v2004-20220812-en
General
-
Target
WireTap.exe
-
Size
282KB
-
MD5
98d8bbeac624e77323f45256f6c87369
-
SHA1
b071b2a8309eabe0698c3cee94a23b74f71a72e5
-
SHA256
a43bb6f7722fc5426cf74039935d60d648f085aa1f463ec94c32add776fa3928
-
SHA512
ee8158182f638cdca5f9028cdfe2300a1b4b03e1338bd0bc3e4d410e647cdb3b7e7f4738b59a796b72b373ddefa9c30eea5388ccf7c4fe387c9811f97b5b041e
-
SSDEEP
6144:pO4DaiLyHSbK5hY2Qd1ChHvNGJZchWRPQUuJYpghBDxAB3t0PEpFezMB:aiLYSGk25hHvNGJihCZpgBJPyj
Malware Config
Signatures
Files
-
WireTap.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ