Static task
static1
Behavioral task
behavioral1
Sample
6778b04e16b35018712e6427da1caaa580b8cd00c2c05581903361c4d8e287f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6778b04e16b35018712e6427da1caaa580b8cd00c2c05581903361c4d8e287f2.exe
Resource
win10v2004-20220812-en
General
-
Target
6778b04e16b35018712e6427da1caaa580b8cd00c2c05581903361c4d8e287f2
-
Size
42KB
-
MD5
9392f5c5bbf90b9e7d5ab9f2466372dc
-
SHA1
a91a5806946191d822cc8bc3598b6a318ec21d2d
-
SHA256
6778b04e16b35018712e6427da1caaa580b8cd00c2c05581903361c4d8e287f2
-
SHA512
f335c0a358559c821a4092ee9106ddd6454b60b1b4e86dc83d9dca2f69571addcae0814de17f4c4bab984c373291297707aaeca08a38f318b7ce0acafa6a4ea7
-
SSDEEP
768:1RGcJCq1CradrvdhAtWHy2MVvCKENK2TeV7VlP0EbaOzh:VJL1QaZ1CaiVvCjN07VlP0EbaO
Malware Config
Signatures
Files
-
6778b04e16b35018712e6427da1caaa580b8cd00c2c05581903361c4d8e287f2.exe windows x86
2a7ce4a49a0b116396fc62e9e4114eec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_ctype_
_fdopen64
_fopen64
_fstat64
_impure_ptr
access
atoi
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fgetc
fgets
fileno
fprintf
fputc
fputs
free
fseek
fwrite
getenv
getopt
malloc
memset
mkstemp
optarg
optind
perror
printf
putc
puts
realloc
remove
rewind
sprintf
strcat
strchr
strcmp
strcpy
strdup
strlen
strncpy
strtol
kernel32
GetModuleHandleA
cygncurses-8
_nc_boolcodes
_nc_boolfnames
_nc_boolnames
_nc_capcmp
_nc_check_termtype2
_nc_curr_col
_nc_curr_line
_nc_disable_period
_nc_doalloc
_nc_find_entry
_nc_first_name
_nc_get_hash_table
_nc_head
_nc_infotocap
_nc_name_match
_nc_numcodes
_nc_numfnames
_nc_numnames
_nc_read_entry_source
_nc_resolve_uses2
_nc_rootname
_nc_set_source
_nc_set_type
_nc_set_writedir
_nc_strcodes
_nc_strfnames
_nc_strnames
_nc_syntax
_nc_tail
_nc_tic_dir
_nc_tic_expand
_nc_tic_written
_nc_tinfo_fkeysf
_nc_tparm_err
_nc_tracing
_nc_trim_sgr0
_nc_user_definable
_nc_visbuf
_nc_visbuf2
_nc_warning
_nc_write_entry
curses_version
keyname
tparm
use_extended_names
_nc_tracing
_nc_tracing
_nc_check_termtype2
_nc_check_termtype2
_nc_head
_nc_head
_nc_head
_nc_disable_period
_nc_disable_period
_nc_curr_line
_nc_curr_line
_nc_curr_col
_nc_tail
_nc_tparm_err
_nc_tparm_err
_nc_tparm_err
_nc_tparm_err
_nc_tparm_err
_nc_tparm_err
_nc_syntax
_nc_syntax
_nc_user_definable
_nc_user_definable
_nc_user_definable
_nc_user_definable
_nc_user_definable
_nc_user_definable
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 560B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE