Static task
static1
Behavioral task
behavioral1
Sample
Passwords .txt.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Passwords .txt.exe
Resource
win10v2004-20220901-en
General
-
Target
Passwords .txt.exe
-
Size
1.1MB
-
MD5
a05e2b926b9b2885bdff622eef915749
-
SHA1
0cf519cf24a9185719277b3d4046a9c810365667
-
SHA256
aeb157d7aae235c2d7b962ccd2bbda791bf8e7a458724e565d6b09280470fd16
-
SHA512
ceb53df0682aba6f9d6fccbcf3302187386e0bc2f40d609e8673c1c4cc3169f09fcf297dcb309d55b7a80197eed549729a39e9e07fef255c6293fb08018e8676
-
SSDEEP
24576:vCluEroVnXJTXCgeq4DBkq0arpFxPXgVOKP/PDMSz:vCwEroVXJTynqCBUaB/gACPDlz
Malware Config
Signatures
Files
-
Passwords .txt.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 985KB - Virtual size: 985KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ