Static task
static1
Behavioral task
behavioral1
Sample
b2d066fed884129c6207510b484f8fa3fd72378068f183055d7019df5b3f6f26.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2d066fed884129c6207510b484f8fa3fd72378068f183055d7019df5b3f6f26.exe
Resource
win10v2004-20221111-en
General
-
Target
b2d066fed884129c6207510b484f8fa3fd72378068f183055d7019df5b3f6f26
-
Size
54KB
-
MD5
61a09582e6de453992a71d5dc393b781
-
SHA1
07214f8df6c28c96f746110a1229bc4ab0dbc819
-
SHA256
b2d066fed884129c6207510b484f8fa3fd72378068f183055d7019df5b3f6f26
-
SHA512
e5efd11c38d7cb8c59239b78edcf9df5b8d19832c92b453d935e73a7855b82c36d5559af3e113c30a6231a160f93bbea6d61f36ac8bd8afc14f6da3242c46ec2
-
SSDEEP
768:cbNjnZoRffLVLmxx9dDiN7Lu5XJVPBkOhEHlevr:cbNKVLVL4x9dDQLgbJ5EHlej
Malware Config
Signatures
Files
-
b2d066fed884129c6207510b484f8fa3fd72378068f183055d7019df5b3f6f26.exe windows x86
023e1cb8e6ae0c2bd2a3de7e852d9f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_impure_ptr
abort
calloc
cygwin_internal
dll_crt0__FP11per_process
fprintf
free
getopt_long
isdigit
localtime
malloc
mktime
optind
printf
pthread_atfork
realloc
sleep
sprintf
strcasecmp
strchr
strcpy
strlen
strrchr
strtol
time
kernel32
AddAtomA
FindAtomA
FormatMessageA
GetAtomNameA
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SetSystemPowerState
user32
ExitWindowsEx
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 44KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE