Static task
static1
Behavioral task
behavioral1
Sample
e11202f5252de706f1770047ba44d0ef9a5951d62ca1be09198864f70ec8d779.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e11202f5252de706f1770047ba44d0ef9a5951d62ca1be09198864f70ec8d779.exe
Resource
win10v2004-20220901-en
General
-
Target
e11202f5252de706f1770047ba44d0ef9a5951d62ca1be09198864f70ec8d779
-
Size
123KB
-
MD5
84cfd15cfa60371c48376864108c10e0
-
SHA1
52dd23d8622a45e476775375c4e44ba917082f94
-
SHA256
e11202f5252de706f1770047ba44d0ef9a5951d62ca1be09198864f70ec8d779
-
SHA512
16ec21b9796d4025a5c5c12588f2a209b19585b341963ee46b52c236943344fcbf53ef1acc3a5a6d9cb0705c7258fcf6e63c4730cbf7e2668a2d453c8e080336
-
SSDEEP
3072:nmdzQGq7YjR92LpFqJr7hiMftm+AQH0gEXwy60q3uxo5Su:nOs1YjR8T/MftqQMq3o6t
Malware Config
Signatures
Files
-
e11202f5252de706f1770047ba44d0ef9a5951d62ca1be09198864f70ec8d779.exe windows x86
023e1cb8e6ae0c2bd2a3de7e852d9f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_impure_ptr
abort
calloc
cygwin_internal
dll_crt0__FP11per_process
fprintf
free
getopt_long
isdigit
localtime
malloc
mktime
optind
printf
pthread_atfork
realloc
sleep
sprintf
strcasecmp
strchr
strcpy
strlen
strrchr
strtol
time
kernel32
AddAtomA
FindAtomA
FormatMessageA
GetAtomNameA
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SetSystemPowerState
user32
ExitWindowsEx
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcwsxhu Size: 84KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE