Static task
static1
Behavioral task
behavioral1
Sample
5e3972d5ae161fdfab8d3adb7d7b8076a3bed42f10f714cdca2a586b44201e7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e3972d5ae161fdfab8d3adb7d7b8076a3bed42f10f714cdca2a586b44201e7c.exe
Resource
win10v2004-20220901-en
General
-
Target
5e3972d5ae161fdfab8d3adb7d7b8076a3bed42f10f714cdca2a586b44201e7c
-
Size
552KB
-
MD5
6a8f23ab343ab796c45bf0cddd5374a0
-
SHA1
7cf2bc6cdf000e07ae3b22487567d9ae794b33ed
-
SHA256
5e3972d5ae161fdfab8d3adb7d7b8076a3bed42f10f714cdca2a586b44201e7c
-
SHA512
d07752f5e2432af21d6ceed0408c8c131a2fc5c541d7b9d64cbdfb363de39a6e8182e45a6c52057ef722162207aab0c7284a71dd2fa20e0c745b95d9c502223c
-
SSDEEP
12288:zK+I9UO4j9QEKKtMYkOSV+/ta/Tz4oVp5mzZoSgzmmlJH6VT27F2QU:++I9fpW/ta/IoV8ZoSgtkVT27AQU
Malware Config
Signatures
Files
-
5e3972d5ae161fdfab8d3adb7d7b8076a3bed42f10f714cdca2a586b44201e7c.exe windows x86
710ec5e2e1cce087aa50a75df3ec4000
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msys-1.0
__errno
__main
_ctype_
abort
atol
calloc
chdir
chmod
close
closedir
creat
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fdopen
fflush
fileno
fopen
fprintf
fread
free
fseek
fstat
ftell
fwrite
getc
getenv
geteuid
gmtime
isatty
localtime
lseek
malloc
memcpy
memset
mkdir
mktemp
open
opendir
pathconf
pclose
perror
popen
printf
putc
raise
read
readdir
realloc
rename
rmdir
setbuf
setmode
sigaction
sigaddset
sigemptyset
signal
sigprocmask
sprintf
stat
strcmp
strcpy
strlen
strncmp
strrchr
system
time
unlink
utime
vfprintf
write
kernel32
GetModuleHandleA
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 496KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE