Static task
static1
Behavioral task
behavioral1
Sample
Secretsdump.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Secretsdump.exe
Resource
win10v2004-20221111-en
General
-
Target
Secretsdump.exe
-
Size
41KB
-
MD5
4195a4582de2f7547c96eb9e7895a5f5
-
SHA1
e82b25bb00676b75b1e9213da231877bedf5ee14
-
SHA256
a86c99eefbb052a0f1fe99162e5e4a026d8aeb400a3ed899a59d0318a2da36e8
-
SHA512
4b34bf4d205f668f020017343d07efd911d8e14a38da61bf967d5412617afd912c6d61f8c0a803ebe58795e2c66fbe4be1e085922beba3712c58f4516650e952
-
SSDEEP
768:MeMM1ZkT0jKfIOcsjInNq8wFpdUf5lFAQxvShu8APKyZR0/LjP:MnM1ZhOfInsjiNq8updyfAthFEi/3
Malware Config
Signatures
Files
-
Secretsdump.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ