Static task
static1
Behavioral task
behavioral1
Sample
PhoenixGrabber.exe
Resource
win10v2004-20221111-en
General
-
Target
PhoenixGrabber.exe
-
Size
18.0MB
-
MD5
4d7a7a81246f72e1cd271b65b511a10a
-
SHA1
6a6da4fba8d0f0a15fe63bf17aeb8c639cbabf16
-
SHA256
f4aaa79cbcb8fe55093566ce9479e597e70b8d927db0da1091cb1229c125f022
-
SHA512
49887ccf4732ff997cb86e1f9a289c2127d6b67700dd5a7024b204ab20b64aebfb88aa35d2d89a513170e344c8818692e032b167c893896e5026d4cbe2069978
-
SSDEEP
393216:s/jSmvJRhOzAlkRh4bpYdBNMK/YppqdTosWHxzlxcq5m:sjSmvJRsakRhApiMKAX0WHxRC
Malware Config
Signatures
Files
-
PhoenixGrabber.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18.0MB - Virtual size: 18.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ