Static task
static1
Behavioral task
behavioral1
Sample
89e7f9fbb2bb18896bdb416219d815fac748c612a43143b3fa50c04386ab7a48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89e7f9fbb2bb18896bdb416219d815fac748c612a43143b3fa50c04386ab7a48.exe
Resource
win10v2004-20220901-en
General
-
Target
89e7f9fbb2bb18896bdb416219d815fac748c612a43143b3fa50c04386ab7a48
-
Size
175KB
-
MD5
043beefab29399ebe58f0ee45b059d81
-
SHA1
31bcc06cebea910232170ff859b2f52a7a97fb73
-
SHA256
89e7f9fbb2bb18896bdb416219d815fac748c612a43143b3fa50c04386ab7a48
-
SHA512
c949793276c50a769a2acb4a8d15a5625f2ea567944f1e85c46c880cf621768a7ce5af4e308de5803e3a62395d8691c6c32c52ed8ee957e2d1b4935f94a33306
-
SSDEEP
3072:feX4gWYD1oT5Pw2Gw8G8/pNJhkU6RNd6H5etFXEXNPraPgZej4EIk91vax4FNmY:2X4gP6THCX8RCH5QFUXhraPgqvI81va0
Malware Config
Signatures
Files
-
89e7f9fbb2bb18896bdb416219d815fac748c612a43143b3fa50c04386ab7a48.exe windows x86
ce75ea05ed5c09587999f7c97beb12e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__isnand
__main
__mb_cur_max
__signbitd
_ctype_
_exit
_fcntl64
_fopen64
_freopen64
_fstat64
_impure_ptr
_lstat64
_open64
_stat64
_tzname
abort
atexit
btowc
calloc
chdir
close
closedir
cygwin_internal
dirfd
dll_crt0__FP11per_process
exit
fchdir
fclose
fflush
fgetc
fprintf
fputc
fputs
free
frexp
fwrite
getc_unlocked
getcwd
getenv
gmtime_r
iswctype
iswprint
ldexp
localeconv
localtime
localtime_r
malloc
mbrlen
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
opendir
printf
putc_unlocked
putchar_unlocked
qsort
readdir
realloc
rmdir
setlocale
snprintf
sprintf
strcat
strchr
strcmp
strerror_r
strftime
strlen
strncmp
strrchr
strspn
strtoul
strtoumax
towlower
tzset
unlink
wcscat
wcslen
wctype
wmemchr
wmemcpy
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 904B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE