Static task
static1
General
-
Target
csrss-protected.exe
-
Size
4.9MB
-
MD5
6d8b6bd31ad8e72dfa4d6a0e91bb0119
-
SHA1
2d2976c8d103e1b4523621aa45e1828397393fb8
-
SHA256
2b695e1d9213209253518fc7b74e533fa1354aa19f680ac133577c078ec0b559
-
SHA512
b63da29d14fd8314ec1483fdc784ae4fd13407d640234dd2d51b129d95435275c1141d9ed2d6c631f1c250865d89df80c767b332325e4fb128a95f04acdbdbb9
-
SSDEEP
98304:skZwBV7bxJy9JGqSLT6jHymhNa3JMLmMfnbtuj3EOaCeDczE7Hou/GK+2uh4t:sCwBbJy9JdymDa3IRkjU7DJ7Hr1
Malware Config
Signatures
Files
-
csrss-protected.exe.exe windows x86
Password: test214124
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkjlaxzu Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pofpzydk Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE