Static task
static1
Behavioral task
behavioral1
Sample
1b9a2568c6ffd7142f128cb3bb5d9f4ca5fea60467e789f1188e2689306d25e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b9a2568c6ffd7142f128cb3bb5d9f4ca5fea60467e789f1188e2689306d25e6.exe
Resource
win10v2004-20220901-en
General
-
Target
1b9a2568c6ffd7142f128cb3bb5d9f4ca5fea60467e789f1188e2689306d25e6
-
Size
102KB
-
MD5
774824799fce6d412e74b97499c85540
-
SHA1
4b21c3a340b25549aac97c06e581e3c8e009f282
-
SHA256
1b9a2568c6ffd7142f128cb3bb5d9f4ca5fea60467e789f1188e2689306d25e6
-
SHA512
c0037903fccfed38212bf6206095a4102e98262406ee6545105f872993c151991a812d5147ecec7cb261ac24e152db0c0aba616df001005004c15a7fd1ea8b11
-
SSDEEP
3072:6nDbnPeBCoEHgtZX+hcFIy3JemlWa7szmH12:6nDIAHgLUcey3JJ8dmH4
Malware Config
Signatures
Files
-
1b9a2568c6ffd7142f128cb3bb5d9f4ca5fea60467e789f1188e2689306d25e6.exe windows x86
ab6d9a0c8e4bbc487761e60774841c11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
_ctype_
_fopen64
_geteuid32
_getpwuid32
_getpwuid_r32
_getuid32
_impure_ptr
_lseek64
_open64
_setreuid32
abort
access
atexit
calloc
close
closedir
cygwin_internal
dll_crt0__FP11per_process
endpwent
execvp
exit
fclose
fflush
fprintf
fputc
fputs
fread
free
fwrite
getc
getcwd
getenv
malloc
memcpy
memmove
memset
opendir
pclose
popen
printf
putchar
puts
read
readdir
realloc
setlocale
setpwent
sprintf
strcasecmp
strcat
strchr
strcmp
strcpy
strdup
strerror
strlen
strncasecmp
strncmp
strncpy
strrchr
strsignal
strstr
strtod
strtol
system
ungetc
vsnprintf
vsprintf
write
kernel32
GetModuleHandleA
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 736B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE