Static task
static1
Behavioral task
behavioral1
Sample
2ddcc98ae45cc8f5fb0a02a58530bf45042941b8fa72415fa3e6faacd7c9d667.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2ddcc98ae45cc8f5fb0a02a58530bf45042941b8fa72415fa3e6faacd7c9d667.exe
Resource
win10v2004-20220901-en
General
-
Target
2ddcc98ae45cc8f5fb0a02a58530bf45042941b8fa72415fa3e6faacd7c9d667
-
Size
69KB
-
MD5
a16d5863aee56db284bac794daa08560
-
SHA1
df874bfc2fb97e0e183f1eedddb6cac428a93cdb
-
SHA256
2ddcc98ae45cc8f5fb0a02a58530bf45042941b8fa72415fa3e6faacd7c9d667
-
SHA512
62c14298762dea10091d16f9d7e52995e520e093516993fd8a1a4d7723a09fb4b0a3fca901266f412cdc419658cd29e616834ad6d3b12cb8521b3bb59259a685
-
SSDEEP
768:/DA4B5YgeS37eASLIzyaKFzqPddvrIDz5Sya/awwZzpfn1WjLc2IxHUw0mQMGyP:04BBrMt+dvrIDz5lWabnv0jfmH3GyP
Malware Config
Signatures
Files
-
2ddcc98ae45cc8f5fb0a02a58530bf45042941b8fa72415fa3e6faacd7c9d667.exe windows x86
5c39c30763a967223ae3a05b537aff09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__main
_fopen64
_impure_ptr
_lstat64
calloc
cygwin_conv_to_full_win32_path
cygwin_conv_to_posix_path
cygwin_internal
cygwin_split_path
dll_crt0__FP11per_process
exit
fclose
free
getcwd
getenv
malloc
memset
readlink
realloc
setenv
sprintf
strcasecmp
strcat
strchr
strcpy
strdup
strlen
strncat
strncpy
strpbrk
strrchr
strspn
strtok
vsprintf
kernel32
AllocConsole
CloseHandle
CreatePipe
CreateProcessA
FreeConsole
GetCommTimeouts
GetCommandLineA
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
LoadLibraryA
ReadFile
SetCommTimeouts
SetEnvironmentVariableA
SetHandleInformation
WaitForMultipleObjects
WaitForSingleObject
user32
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE