Static task
static1
Behavioral task
behavioral1
Sample
HybridLoggerV2.exe
Resource
win7-20240704-en
General
-
Target
HybridLoggerV2.exe
-
Size
100KB
-
MD5
cf491f53fca3e1bb8bbe8bee7d15632a
-
SHA1
5cc3a7e129d346448b4a258e7ea8d1b8447428d8
-
SHA256
aefd55da2411ec1f2c9876622c4e1a1f837d36f31cdf6a1d631146ad2ba27d3b
-
SHA512
e138f43fad29d3943182bccf61c232551d38c4a95dcd83e41a8d7cb5fedabb55221517fb1efbfee0caea915c61804aeb7a5f3e63998a00feef1f5292c05b3132
-
SSDEEP
3072:W0W/Wa4Y4e2wkCHRt7EUxix2qT97O6JUrq:DwpxtTMxpRO6JU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HybridLoggerV2.exe
Files
-
HybridLoggerV2.exe.exe windows:4 windows x86 arch:x86
Password: 1
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ