Static task
static1
Behavioral task
behavioral1
Sample
f2f468e516a4206b6e5d30b69c02ecde04b5f402be2880bec6f319572253725c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2f468e516a4206b6e5d30b69c02ecde04b5f402be2880bec6f319572253725c.exe
Resource
win10v2004-20221111-en
General
-
Target
f2f468e516a4206b6e5d30b69c02ecde04b5f402be2880bec6f319572253725c
-
Size
38KB
-
MD5
59ead299e68d803dd78a114dc0f25b04
-
SHA1
b1d3a6e5c858f7893628fd69a3c928989606e1dd
-
SHA256
f2f468e516a4206b6e5d30b69c02ecde04b5f402be2880bec6f319572253725c
-
SHA512
a6bff577924fb2c185a73353afec7b2a0f70e9dd6f7ba4ed4359ce368fcc607a6601298739a8bd7aaed7fc2742b1c3fedbe9a1737e233e5cb08f14e816ad187b
-
SSDEEP
768:KhfF1EjjAihvL5DNpQPxPhyqVMK12w1t8JQXboJH0fpeGGlIq:KtaQPCKMK1U6xeGG
Malware Config
Signatures
Files
-
f2f468e516a4206b6e5d30b69c02ecde04b5f402be2880bec6f319572253725c.exe windows x86
d30438bdad535893ce8df7d6adfe47ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_impure_ptr
abort
atexit
calloc
clock_gettime
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
getenv
gettimeofday
iswprint
malloc
mbrtowc
mbsinit
memcpy
memset
nanosleep
printf
putc_unlocked
realloc
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
strtod
vfprintf
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 560B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE