Static task
static1
Behavioral task
behavioral1
Sample
fc61e6fc7f16c3d0cae395e07a90ab6343505e2bc5bbbbc481e9fd9cc18f2e5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc61e6fc7f16c3d0cae395e07a90ab6343505e2bc5bbbbc481e9fd9cc18f2e5b.exe
Resource
win10v2004-20221111-en
General
-
Target
fc61e6fc7f16c3d0cae395e07a90ab6343505e2bc5bbbbc481e9fd9cc18f2e5b
-
Size
278KB
-
MD5
92103b38176f70df1a4d347bb29db26f
-
SHA1
000797846edb4bfd35ac21289be3c7dd9dfdda65
-
SHA256
fc61e6fc7f16c3d0cae395e07a90ab6343505e2bc5bbbbc481e9fd9cc18f2e5b
-
SHA512
3bcaab3165f76d5ee40db8aeddab28aba5adfc6a2f00fb087b0429acb47d12cb02a36a3ad982bd42021dd5b6998d0c7844a027186e50470eaf9a9e7cafc3a58d
-
SSDEEP
6144:hOOpYeF9aYobZQI51FUBPvetWKWPUavQfQeGSHQ8tr2dfHBtbXgQYH:gSmNbZRzahkWPeoe0S2db
Malware Config
Signatures
Files
-
fc61e6fc7f16c3d0cae395e07a90ab6343505e2bc5bbbbc481e9fd9cc18f2e5b.exe windows x86
0e74811198900a90ac0a03d70f18ec7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_fcntl64
_fdopen64
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getgroups32
_getuid32
_impure_ptr
_open64
_stat64
abort
accept
access
atof
atoi
bind
btowc
calloc
close
connect
ctime
cygwin_internal
dlerror
dll_crt0__FP11per_process
dlopen
dlsym
dup
execl
exit
fclose
fflush
fileno
fork
fprintf
fputc
fputs
free
fwrite
getenv
gethostbyname
getpgrp
getpid
getppid
getservbyname
grantpt
isatty
iswalnum
iswctype
iswlower
iswupper
kill
listen
localeconv
localtime
longjmp
malloc
mbrlen
mbrtowc
mbsinit
memcpy
memmove
memset
pclose
pipe
popen
printf
ptsname
putc
puts
qsort
read
realloc
recvfrom
setjmp
setlocale
setmode
setsockopt
shutdown
signal
socket
sprintf
sscanf
strcasecmp
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncasecmp
strncmp
strncpy
strrchr
strtod
strtoul
system
tcgetattr
tcsetattr
time
towlower
towupper
unlockpt
vfprintf
wait
wcrtomb
wcscoll
wctype
_fcntl64
_fdopen64
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getgroups32
_getuid32
_open64
_stat64
atan2
ceil
cos
exp
floor
fmod
log
pow
sin
sqrt
cygintl-3
libintl_bindtextdomain
libintl_dgettext
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE