Static task
static1
Behavioral task
behavioral1
Sample
7c35eeb8a8cf7e822bf4865f16efc6cf1b858f3041e9a4aa3221e41ef301458e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c35eeb8a8cf7e822bf4865f16efc6cf1b858f3041e9a4aa3221e41ef301458e.exe
Resource
win10v2004-20220812-en
General
-
Target
7c35eeb8a8cf7e822bf4865f16efc6cf1b858f3041e9a4aa3221e41ef301458e
-
Size
72KB
-
MD5
77d96be733b472be4d27162f09515e1a
-
SHA1
41ddcdd83d39c6bf851c7d1ce4eb6cb3a83840c0
-
SHA256
7c35eeb8a8cf7e822bf4865f16efc6cf1b858f3041e9a4aa3221e41ef301458e
-
SHA512
0c76a0bccefa692efba430f8ea8dc16944b35c5e236c700aa68cbef8886fdf8910f17ee20b0e3e64461cc43201382b48d8c548f919c2c334adb502bf7c7e9eba
-
SSDEEP
1536:YtUo3oMyM4M2epd5Hd1/BGNJB8lOcEnMEysFbgOdQ:E3oMRVpj5rpGNJB0tEnGsF0y
Malware Config
Signatures
Files
-
7c35eeb8a8cf7e822bf4865f16efc6cf1b858f3041e9a4aa3221e41ef301458e.exe windows x86
f3feaacf58b9c592ae85c098b6dfdef7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert_func
__ctype_ptr__
__errno
__getreent
__locale_mb_cur_max
__main
_dll_crt0@0
_exit
_fchown32
_fcntl64
_fstat64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_open64
_stat64
abort
atexit
calloc
close
closedir
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
endgrent
endpwent
exit
fchdir
fchownat
fclose
fdopendir
fflush
fprintf
fputs
free
frexp
fstatat
fwrite
getopt_long
getpwnam
iswprint
ldexp
malloc
mbrtowc
mbsinit
memcpy
memmove
memset
openat
optarg
optind
printf
putc_unlocked
qsort
readdir
realloc
setlocale
snprintf
sprintf
stpcpy
strchr
strcmp
strcpy
strerror_r
strlen
strrchr
strtoul
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
cyggcc_s-1
__deregister_frame_info
__register_frame_info
__udivdi3
__umoddi3
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 740B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE