Static task
static1
Behavioral task
behavioral1
Sample
Orcus.HVNC.exe
Resource
win10v2004-20230220-en
General
-
Target
Orcus.HVNC.exe
-
Size
9KB
-
MD5
fbb27b31b0a3e94814744ff981a812aa
-
SHA1
d3f3454d7f2a95dfbfe63092e3ac823fb6e46cd3
-
SHA256
e90ecb51cdb693d9bfd54411d1c1df2b1c3154ef703bef5973efdc7773b01ef4
-
SHA512
1a35557339a59758646a0081f81272527a87420e10b954568961f355759d09b9bbe9786d62c294093b67cd4d498632f92f0ca7b62a58f4a046b73a7d7451bac5
-
SSDEEP
96:mTinTMcqIgakzR3yDYhIXmWMPKE83ePcbIquvqPerXXxj5qlT9MXzv7lk1zNt:8bB3RQXmXPKEae0GXXp5qN9MXzmP
Malware Config
Signatures
Files
-
Orcus.HVNC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ