Static task
static1
Behavioral task
behavioral1
Sample
3832e254469cf23d8c2403f39b328ff9f8a3a1b40b704a1d3910e12cfd3dc20d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3832e254469cf23d8c2403f39b328ff9f8a3a1b40b704a1d3910e12cfd3dc20d.exe
Resource
win10v2004-20220812-en
General
-
Target
3832e254469cf23d8c2403f39b328ff9f8a3a1b40b704a1d3910e12cfd3dc20d
-
Size
86KB
-
MD5
a3b5d4504679fb0a91afd2766ef4e4b9
-
SHA1
0a2d884c99a4394d09a37818a3803154095e8605
-
SHA256
3832e254469cf23d8c2403f39b328ff9f8a3a1b40b704a1d3910e12cfd3dc20d
-
SHA512
939d9e60e5982d04ae9588c8e0d20e77783eba40ec7f4d2a1b5136dd6a913ceabaf7b4f71c72c0063ed24d0250e1819858d730e145112449c8451433c0ab47d7
-
SSDEEP
1536:0mTaKFAEVqvgA/p+kYAA4etYGnDImEh/ydTR2sK42zzdnEVHl/HQMGLaQca3f:0mfAE0vgA/tvsDImEhqFYNnEL8uQHf
Malware Config
Signatures
Files
-
3832e254469cf23d8c2403f39b328ff9f8a3a1b40b704a1d3910e12cfd3dc20d.exe windows x86
6ce945bf70c29fbe7a6c3d1fd37304f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_dll_crt0@0
_feinitialise
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fprintf
free
fwrite
malloc
putc
realloc
strdup
strlen
cyggcc_s-1
__deregister_frame_info
__register_frame_info
cygpopt-0
poptBadOption
poptFreeContext
poptGetArgs
poptGetContext
poptGetNextOpt
poptPrintHelp
poptPrintUsage
poptSetOtherOptionHelp
poptStrerror
gdi32
CreateBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetObjectA
GetStockObject
GetTextMetricsA
Rectangle
SelectObject
SetBkColor
SetBkMode
SetTextColor
kernel32
GetModuleHandleA
GetProcAddress
user32
DrawTextA
GetDC
ReleaseDC
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 576B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE