Static task
static1
Behavioral task
behavioral1
Sample
907094541b2c270c006754cf1a90c76bf69a49a9d7229fa6a2b5c7984c278282.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
907094541b2c270c006754cf1a90c76bf69a49a9d7229fa6a2b5c7984c278282.exe
Resource
win10v2004-20220901-en
General
-
Target
907094541b2c270c006754cf1a90c76bf69a49a9d7229fa6a2b5c7984c278282
-
Size
113KB
-
MD5
0ecf85a97687ce2500368ed24f8037b0
-
SHA1
d1734f5524b6c421ec7cd7159e36ea542a590a91
-
SHA256
907094541b2c270c006754cf1a90c76bf69a49a9d7229fa6a2b5c7984c278282
-
SHA512
5cf53a30547db2fb94fd59da27e1c53e7687e1e98f72802995d600e8a39d7912ecf7cc9caee7b0cf4b369e2c15c231fbdbbd0f0f13d3bdb107afe6627d5c7b63
-
SSDEEP
3072:m/MHqhYs59XbgTzBY0n8ZyRdWNsHmiEYecw5B2posV:mEKr9IYwu8fEL5spz
Malware Config
Signatures
Files
-
907094541b2c270c006754cf1a90c76bf69a49a9d7229fa6a2b5c7984c278282.exe windows x86
e1e2eece9e63dcbdd3e2c25ac05770e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert_func
__ctype_ptr__
__errno
__getreent
__locale_mb_cur_max
__main
_dll_crt0@0
_exit
_fcntl64
_fstat64
_impure_ptr
_lstat64
_open64
_stat64
abort
atexit
calloc
close
closedir
cygwin_detach_dll
cygwin_internal
dirfd
dll_dllcrt0
error
exit
fchdir
fchmodat
fclose
fdopendir
fprintf
fputs
free
fstatat
fwrite
getopt_long
iswprint
malloc
mbrtowc
mbsinit
memcpy
memmove
memset
openat
optarg
optind
printf
program_invocation_name
program_invocation_short_name
qsort
readdir
realloc
strcpy
strlen
strrchr
umask
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_setlocale
libintl_textdomain
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 688B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE