Static task
static1
Behavioral task
behavioral1
Sample
racf2john.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
racf2john.exe
Resource
win10v2004-20230220-en
General
-
Target
racf2john.exe
-
Size
13KB
-
MD5
2bb7ddbd27c67d2906a3f3e36f7e4bdc
-
SHA1
842dd1e4eda5800890ab7010a0465aedaf86e271
-
SHA256
390788c585d28aed603e618680e83aba11c3bf2bf60a0d5ca9163d776d715738
-
SHA512
06f894ac3fea131e1505b012c63f8849874a62ce12f539a2c368107b96d346f96612a12c889b76ef8428fd69970cffe4718ac46520b5009e3e6ce7232ecba43a
-
SSDEEP
384:c6q7ty8ZwMhUEKcccKKKKKKKKKKc6GQCW:c6LQZUEKcccKKKKKKKKKKc3HW
Malware Config
Signatures
Files
-
racf2john.exe.exe windows x64
b6532ba64c43ab9213e5fcc035a004a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert_func
__cxa_atexit
__getreent
__main
_dll_crt0
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fopen
fread
free
fwrite
malloc
perror
posix_memalign
printf
putchar
puts
realloc
stat
stpcpy
strcasecmp
strcmp
strlen
strncat
kernel32
GetModuleHandleA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE