Static task
static1
Behavioral task
behavioral1
Sample
585b9a8197c405e800cb6bd0ca550a9b4cd05d46a485c8c4fbc97f7d1a95bfcf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
585b9a8197c405e800cb6bd0ca550a9b4cd05d46a485c8c4fbc97f7d1a95bfcf.exe
Resource
win10v2004-20220812-en
General
-
Target
585b9a8197c405e800cb6bd0ca550a9b4cd05d46a485c8c4fbc97f7d1a95bfcf
-
Size
133KB
-
MD5
f94ecf30a834d53d4db16857b9fc2c59
-
SHA1
d7a365d88da1caa9e351330262549fa05d552b4b
-
SHA256
585b9a8197c405e800cb6bd0ca550a9b4cd05d46a485c8c4fbc97f7d1a95bfcf
-
SHA512
e9a55c3d1b5c0d48c3037d46dc6b4d519a3363e101980cd996aac557d00455442d2477dc0d23647aa1f29cb4dc734ba534ae982493302dcf2fff90919654f061
-
SSDEEP
1536:hEjY2KQeLKAA7KIIzUxjDacKR79908a+XHMwPD/LROAGdZmLaV:hEjY2LeLeKzoldKJa0ZJ6ZpV
Malware Config
Signatures
Files
-
585b9a8197c405e800cb6bd0ca550a9b4cd05d46a485c8c4fbc97f7d1a95bfcf.exe windows x86
f603c30c407716ff6b1c24f603184980
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cygwin1
atexit
atoi
bzero
calloc
chmod
close
__errno
dll_crt0__FP11per_process
dll_dllcrt0
exit
fclose
fdopen
fflush
fgets
fileno
fopen
fprintf
fputc
fread
free
fscanf
fseek
fstat
ftell
ftruncate
fwrite
__main
malloc
memcpy
memset
nice
open
printf
puts
raise
read
realloc
select
__srget
signal
sprintf
sscanf
stat
strcat
strchr
strcmp
strcpy
strerror
strncmp
strncpy
strrchr
__swbuf
tcgetattr
tcsetattr
times
umask
unlink
vfprintf
write
kernel32
GetModuleHandleA
SetConsoleCtrlHandler
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE