Static task
static1
Behavioral task
behavioral1
Sample
3a82622fc8c65525156fac66034068c2b6362a13c3718c8793bd8fb684f1ad64.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3a82622fc8c65525156fac66034068c2b6362a13c3718c8793bd8fb684f1ad64.exe
Resource
win10v2004-20221111-en
General
-
Target
3a82622fc8c65525156fac66034068c2b6362a13c3718c8793bd8fb684f1ad64
-
Size
150KB
-
MD5
c7603906b5d9a9d0b3224a737888ad15
-
SHA1
febfa9b5edc109a482bee4645ec56506aa5f838e
-
SHA256
3a82622fc8c65525156fac66034068c2b6362a13c3718c8793bd8fb684f1ad64
-
SHA512
9dd34b16995a6fe809e5fcf0bd224dda312d70ad43d0cf297ceec91440065d3d081df70f376917ed4048ea44ee7941636c9f0944c8145754e7075ffb1b34cc8a
-
SSDEEP
3072:amU8HmDceRpi20Rd51eq1V6PxMLiEh5k/6j7efIvaQAWuMKrHEbM+0lo:amZGV27eqiarLHefIvmWZBbMC
Malware Config
Signatures
Files
-
3a82622fc8c65525156fac66034068c2b6362a13c3718c8793bd8fb684f1ad64.exe windows x86
9631cc0f402b3632b4cfea4501ddb326
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__errno
__getreent
__main
__mb_cur_max
_ctype_
_exit
_fcntl64
_fdopen64
_fopen64
_getgrgid32
_getgrnam32
_getpwuid32
_impure_ptr
_lstat64
_open64
_stat64
abort
access
atexit
atof
atoi
bsearch
btowc
calloc
chdir
close
closedir
ctime
cygwin_internal
dll_crt0__FP11per_process
endgrent
endmntent
endpwent
execvp
exit
fchdir
fclose
fflush
fileno
fork
fprintf
fputc
fputs
free
fwrite
getcwd
getenv
getline
getmntent
getpwnam
isatty
iswalnum
iswctype
iswlower
iswprint
localeconv
localtime
malloc
mbrtowc
mbsinit
mbsrtowcs
memchr
memcpy
memmove
mempcpy
memset
nl_langinfo
opendir
printf
putc
putchar
puts
qsort
readdir
readlink
realloc
remove
setlocale
setmntent
signal
sprintf
strcat
strchr
strcmp
strcpy
strdup
strerror_r
strftime
strlen
strncmp
strncpy
strndup
strpbrk
strrchr
strspn
strstr
strtok_r
strtoul
strtoumax
sysconf
time
towlower
towupper
uname
vfprintf
waitpid
wcrtomb
wcscat
wcscoll
wcslen
wctype
wcwidth
wmemchr
wmemcpy
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
GetModuleHandleA
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE