Static task
static1
Behavioral task
behavioral1
Sample
hccap2john.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
hccap2john.exe
Resource
win10v2004-20230220-en
General
-
Target
hccap2john.exe
-
Size
18KB
-
MD5
35f35534297ef0ed6d5bfe6168f37ce8
-
SHA1
7a8a50cb83e9f57bfcdbb4937a9e0cbb0078ae88
-
SHA256
a34fce6933c632f852b74b9eec376b77495e524be713d1bae7ce8564c0a777cf
-
SHA512
b65a3d7e7a82fec8e72d59fb579a98ed638e9c410bee9a09ce00e74b1f5c613046cad9edb4f9cbf74000fe32a8026c265ddcc56b64eb22470a2b9d18ce9df5c9
-
SSDEEP
384:ZxNynFYtWJRtPAX7taozmggeXCnL3KccccKKKKKKKKKKcnwcR8GFjCW:PNyn6tWdPAoozm5dLKccccKKKKKKKKKl
Malware Config
Signatures
Files
-
hccap2john.exe.exe windows x64
fea86ffeb4b40886f3dc5b53339a161e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__cxa_atexit
__errno
__getreent
__main
_dll_crt0
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fopen
fprintf
fputc
fread
free
fseek
malloc
perror
posix_memalign
printf
putchar
realloc
sprintf
stat
stpcpy
strcasecmp
strcmp
strlen
strncat
strrchr
kernel32
GetModuleHandleA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE