Static task
static1
Behavioral task
behavioral1
Sample
0fb430e99af744d2c2216cca8a8cc9018b11b26c12336ac508c9176261b40eb6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0fb430e99af744d2c2216cca8a8cc9018b11b26c12336ac508c9176261b40eb6.exe
Resource
win10v2004-20220812-en
General
-
Target
0fb430e99af744d2c2216cca8a8cc9018b11b26c12336ac508c9176261b40eb6
-
Size
485KB
-
MD5
80a4b8546786e36cee7df7e3e06a4a00
-
SHA1
8e4856d9c08dbebcf1c8061c2a97b8452bb01446
-
SHA256
0fb430e99af744d2c2216cca8a8cc9018b11b26c12336ac508c9176261b40eb6
-
SHA512
70dc0dca7581242fd7bbe59bf661d80455b9ecf2112bf94c712ebefa6bbf928ef82b47ff6697124aa66f803ed4910652082b46b6dbb2b8d76e83e90cfad44469
-
SSDEEP
6144:qkdRQ3KQPxzjTyTqlf46g93VgXeE+PNTg9AQU8cEP6W27LX8OMWVUbpCGvD1Kxdl:fzQ3VpTYq50A2TgXGeAdGvB+wn8d
Malware Config
Signatures
Files
-
0fb430e99af744d2c2216cca8a8cc9018b11b26c12336ac508c9176261b40eb6.exe windows x86
68223e9b5decd4f95b57fa031f3c2d2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
_ctype_
_exit
_fdopen64
_fopen64
_freopen64
_fseeko64
_ftello64
_geteuid32
_getgid32
_getpwuid32
_getuid32
_lseek64
_lstat64
_open64
_seteuid32
_setreuid32
_setuid32
_stat64
abort
access
atexit
atoi
atol
calloc
clock
close
closedir
ctime
cygwin_internal
dlclose
dll_crt0__FP11per_process
dlopen
dlsym
dup2
ecvt
execlp
exit
fclose
fcvt
fflush
fgets
fileno
fork
fputc
fputs
fread
free
fwrite
gcvt
getc
getenv
getpwnam
getservbyname
gettimeofday
gmtime
isinf
isnan
localtime
malloc
memcpy
memmove
memset
mktime
opendir
putchar
puts
qsort
rcmd
read
readdir
readlink
realloc
rewind
sbrk
setbuf
setmode
setsockopt
signal
sleep
socketpair
sscanf
strcasecmp
strcat
strchr
strcmp
strcpy
strdup
strerror
strncmp
strncpy
strrchr
strstr
strtol
strtoul
time
unlink
usleep
valloc
wait
write
kernel32
CloseHandle
CreateEventA
CreateFileA
DeviceIoControl
GetDriveTypeA
GetLastError
GetModuleHandleA
GetVersionExA
ResetEvent
WaitForSingleObject
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 71KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE