Static task
static1
Behavioral task
behavioral1
Sample
423f3bc1cb37ebf78d91aa82e27918812bed6024d5d1edd4037ddacaa6f795bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
423f3bc1cb37ebf78d91aa82e27918812bed6024d5d1edd4037ddacaa6f795bd.exe
Resource
win10v2004-20220901-en
General
-
Target
423f3bc1cb37ebf78d91aa82e27918812bed6024d5d1edd4037ddacaa6f795bd
-
Size
112KB
-
MD5
c01ca36e50e629975ddd4d8590009c2b
-
SHA1
e5bc07e10a1995c44ebcd1f4b57775ce038866ce
-
SHA256
423f3bc1cb37ebf78d91aa82e27918812bed6024d5d1edd4037ddacaa6f795bd
-
SHA512
8a1a9b2740041ea9b6390f77b43064eb3dbcd2c2751e2c17e8788ecbebeab0930dd9751d7f7e6f41578370daae421cad2089ebf45d3b450a86b4e51a7e9a61ea
-
SSDEEP
1536:ttx2NuLsO7gGBipOKd0VQIoT2XoVRSzu5Ie89qWLXkPHIxSj4gcvzzfrIOro/yFN:tTkuLUGQXd09XSRe/q9o6YrzUO0yce
Malware Config
Signatures
Files
-
423f3bc1cb37ebf78d91aa82e27918812bed6024d5d1edd4037ddacaa6f795bd.exe windows x86
b32acaa0cb5d2699faad6895aa9e2914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
cygwin1
__errno
__getreent
__main
_ctype_
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getuid32
_lseek64
_open64
_stat64
abort
atoi
bcopy
calloc
close
creat
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fgetc
fgets
fileno
free
fsync
getc
getenv
getpid
ioctl
isatty
kill
longjmp
malloc
memcpy
memset
pclose
popen
putc
read
realloc
setjmp
setlocale
sigemptyset
signal
sigprocmask
sleep
sprintf
strcasecmp
strcat
strchr
strcmp
strcpy
strdup
strerror
strlen
strncmp
strncpy
strsep
strstr
strtoul
system
tcgetattr
tcsetattr
time
write
cygpcre-0
pcre_compile
pcre_exec
pcre_free
pcre_free
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE