Static task
static1
Behavioral task
behavioral1
Sample
0856f6eae1095f730a829fb607b71654814c151375432697154cdd9f38a1ac20.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0856f6eae1095f730a829fb607b71654814c151375432697154cdd9f38a1ac20.exe
Resource
win10v2004-20220812-en
General
-
Target
0856f6eae1095f730a829fb607b71654814c151375432697154cdd9f38a1ac20
-
Size
20KB
-
MD5
c376c4811cd2f9c968eb9be0a98168f2
-
SHA1
b5b4fe6a5d48362444effff357d154fc6c65b6f6
-
SHA256
0856f6eae1095f730a829fb607b71654814c151375432697154cdd9f38a1ac20
-
SHA512
842edcab50df3e9a8074f3544744a0736298a256dfbf4ce90e0ab8abbacb881095cfd502ddffafda9e22950b2f5700c9cdd483e4f8a81e45f2976a40bce1fb7f
-
SSDEEP
384:UMJK9vr+G7b0ELMK03xBsZpT/ryr0z+rqAiqBPHQhyPhyqVQdXpdXjlA22At:3Yl7wEP0BBsZpw4GqAiqBPpPhyqVAjP2
Malware Config
Signatures
Files
-
0856f6eae1095f730a829fb607b71654814c151375432697154cdd9f38a1ac20.exe windows x86
0e9f7e6a657c7ea9e8b0a5976bdd0f13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_impure_ptr
_lstat64
abort
atexit
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
getcwd
getenv
iswprint
malloc
mbrtowc
mbsinit
memcpy
memmove
memset
printf
putc_unlocked
readlink
realloc
setlocale
strchr
strcmp
strerror_r
strlen
strncmp
vfprintf
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 592B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE