Static task
static1
Behavioral task
behavioral1
Sample
Process Hacker 2.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Process Hacker 2.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Process Hacker 2.exe
Resource
win11-20240426-en
General
-
Target
Process Hacker 2.exe
-
Size
245KB
-
MD5
fdb1b4367fafcf9bd0010e1d0b80f870
-
SHA1
e3dea8c30ed83e5340dec69ce6e2480941476744
-
SHA256
49ff1ecfae7ac2155c4185786e7e2c72a5466adc53709e661522e007d30419ad
-
SHA512
8a54570be002515e989c763cdc510e3aa680ab4c21805d61d567f0fa31adf83ad27109bbf50b0027ae775ea81b0da00113d8f65bf3f207c4c04cc377ccb6bc3c
-
SSDEEP
3072:7eyIw0qjWYhH7XxaNeN3w/jhlhE1Z8Nig9PIzHrmuF+bxCXbo6a1oUULptBTB:8eWYhzx2e6VlWT8b9AzHrf+ObvaB4pP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Process Hacker 2.exe
Files
-
Process Hacker 2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 242KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ