Static task
static1
Behavioral task
behavioral1
Sample
1ad667fe1edfabe771a0dc9af6da95ea0b6c9519467f6a34ec00c252bdd5bc29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ad667fe1edfabe771a0dc9af6da95ea0b6c9519467f6a34ec00c252bdd5bc29.exe
Resource
win10v2004-20220812-en
General
-
Target
1ad667fe1edfabe771a0dc9af6da95ea0b6c9519467f6a34ec00c252bdd5bc29
-
Size
73KB
-
MD5
6a18b45900c8c5981d293ed48a1a2920
-
SHA1
85801136f1c55c46cde759b191884b273fc667b1
-
SHA256
1ad667fe1edfabe771a0dc9af6da95ea0b6c9519467f6a34ec00c252bdd5bc29
-
SHA512
e9504cd095e2007635cd336d2e59ecddba5365ba9b63d5bcacb76782ffc52b00829a87b80599eb829d52a15f683c69c2d5f5b8003cf000f48520d7ec6fdd5c12
-
SSDEEP
1536:/LKWXfTCNe4Ka4WxiN6cDJSY+A37feaCMJDmYsLIb4PvYqHB/Afy:/LKWXLC9iNHSDADeak7dJHB/Aq
Malware Config
Signatures
Files
-
1ad667fe1edfabe771a0dc9af6da95ea0b6c9519467f6a34ec00c252bdd5bc29.exe windows x86
f28c83d0da0f0a7fc71923012e273151
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libxml2
xmlStrndup
xmlFree
xmlStrcat
xmlStrdup
xmlMemFree
xmlMemUsed
xmlMemMalloc
xmlMemRealloc
xmlMemoryStrdup
__xmlGenericErrorContext
__xmlGenericError
xmlEncodeEntitiesReentrant
xmlFreeEnumeration
xmlFreeParserCtxt
xmlFreeDoc
xmlParseDocument
inputPush
xmlNewIOInputStream
xmlFreeParserInputBuffer
xmlNewParserCtxt
xmlSchemaFreeValidCtxt
xmlSchemaValidateStream
xmlSchemaSetValidErrors
xmlSchemaNewValidCtxt
xmlParserInputBufferCreateFilename
xmlStreamPop
xmlFreeStreamCtxt
xmlStreamPush
xmlTextReaderConstLocalName
xmlTextReaderConstNamespaceUri
xmlGetNodePath
xmlPatternMatch
xmlTextReaderCurrentNode
xmlTextReaderDepth
xmlTextReaderHasValue
xmlTextReaderConstValue
xmlTextReaderConstName
xmlTextReaderIsEmptyElement
xmlTextReaderNodeType
xmlFreeTextReader
xmlTextReaderIsValid
xmlTextReaderRead
xmlTextReaderSchemaValidate
xmlTextReaderRelaxNGValidate
xmlTextReaderSetParserProp
xmlPatternGetStreamCtxt
xmlPatterncompile
xmlReaderForFile
xmlReaderWalker
xmlDocGetRootElement
xmlDebugDumpEntities
xmlSchemaValidateDoc
xmlRelaxNGFreeValidCtxt
xmlRelaxNGValidateDoc
xmlRelaxNGSetValidErrors
xmlRelaxNGNewValidCtxt
xmlSchematronFreeValidCtxt
xmlSchematronValidateDoc
xmlSchematronNewValidCtxt
xmlValidateDtd
xmlParseDTD
xmlFreeValidCtxt
xmlValidateDocument
xmlNewValidCtxt
xmlDebugDumpDocument
xmlSaveClose
xmlSaveDoc
xmlSaveToFilename
xmlSaveToFd
xmlDocDump
xmlSaveFormatFile
xmlSaveFileEnc
xmlSaveFormatFileEnc
xmlSaveFile
xmlC14NDocDumpMemory
htmlDocDump
htmlSaveFileFormat
htmlSaveFile
xmlValidGetValidElements
xmlCopyDoc
xmlShell
xmlXPathOrderDocElems
xmlXIncludeProcessFlags
xmlFreeDtd
xmlUnlinkNode
xmlGetIntSubset
xmlReadFile
xmlParseFile
xmlCtxtReadFile
xmlCtxtReadIO
xmlReadIO
xmlReadFd
xmlParseChunk
xmlCtxtUseOptions
xmlCreatePushParserCtxt
htmlReadFile
htmlFreeParserCtxt
htmlParseChunk
htmlCreatePushParserCtxt
xmlDocSetRootElement
xmlNodeSetContent
xmlNewDocNode
xmlNewDoc
xmlHasFeature
__xmlParserVersion
xmlMemoryDump
xmlCleanupParser
xmlFreePattern
xmlRelaxNGCleanupTypes
xmlSchemaFree
xmlRelaxNGFree
xmlSchematronFree
xmlSchemaFreeParserCtxt
xmlSchemaParse
xmlSchemaSetParserErrors
xmlSchemaNewParserCtxt
xmlRelaxNGFreeParserCtxt
xmlRelaxNGParse
xmlRelaxNGSetParserErrors
xmlRelaxNGNewParserCtxt
xmlSchematronFreeParserCtxt
xmlSchematronParse
xmlSchematronNewParserCtxt
__xmlDoValidityCheckingDefaultValue
xmlSubstituteEntitiesDefault
__xmlLoadExtDtdDefaultValue
xmlLineNumbersDefault
xmlGetExternalEntityLoader
__xmlTreeIndentString
xmlDeregisterNodeDefault
xmlRegisterNodeDefault
xmlSAXDefaultVersion
xmlLoadCatalogs
xmlSetCompressMode
xmlPedanticParserDefault
__xmlGetWarningsDefaultValue
__xmlParserDebugEntities
xmlAddEncodingAlias
xmlMemSetup
xmlKeepBlanksDefault
xmlSetExternalEntityLoader
xmlNoNetExternalEntityLoader
xmlCheckVersion
msvcrt
fprintf
_iob
clock
vfprintf
_snprintf
_vsnprintf
malloc
fgets
fread
fclose
printf
exit
fopen
free
getenv
sscanf
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_write
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE