Static task
static1
Behavioral task
behavioral1
Sample
john.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
john.exe
Resource
win10v2004-20221111-en
General
-
Target
8f60d537ce2583747f2cd850b3c9f52e55af52a8e63b6c9b8e0a75060eaea5c8
-
Size
53KB
-
MD5
4695e5402ab0bf569f8e559932be4df4
-
SHA1
275df6436849c721144cce68e60c17b9440399c0
-
SHA256
8f60d537ce2583747f2cd850b3c9f52e55af52a8e63b6c9b8e0a75060eaea5c8
-
SHA512
d01c4a55333930dfffd0950a2b76dc8f45d22e0301f108e69df9d5fabf6a31a4741ba78f05cfa25cf06b8d222ea045c3cf3d71e641f8ca73e2224cafd05934b6
-
SSDEEP
1536:7izP8aq+M/cM9Pi+x+ixEZkFjX9gptsHcAvwrEqHevc3HvKdHNwD:c8PlcM08C0WLyL4Eq//KJQ
Malware Config
Signatures
Files
-
8f60d537ce2583747f2cd850b3c9f52e55af52a8e63b6c9b8e0a75060eaea5c8.zip
-
john.exe.exe windows x86
f603c30c407716ff6b1c24f603184980
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cygwin1
atexit
atoi
bzero
calloc
chmod
close
__errno
dll_crt0__FP11per_process
dll_dllcrt0
exit
fclose
fdopen
fflush
fgets
fileno
fopen
fprintf
fputc
fread
free
fscanf
fseek
fstat
ftell
ftruncate
fwrite
__main
malloc
memcpy
memset
nice
open
printf
puts
raise
read
realloc
select
__srget
signal
sprintf
sscanf
stat
strcat
strchr
strcmp
strcpy
strerror
strncmp
strncpy
strrchr
__swbuf
tcgetattr
tcsetattr
times
umask
unlink
vfprintf
write
kernel32
GetModuleHandleA
SetConsoleCtrlHandler
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 206KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE