Static task
static1
Behavioral task
behavioral1
Sample
34a0036a196505db6c58f8b3d121ccb629f13a06f9afd49a23905be256a24242.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
34a0036a196505db6c58f8b3d121ccb629f13a06f9afd49a23905be256a24242.exe
Resource
win10v2004-20220812-en
General
-
Target
34a0036a196505db6c58f8b3d121ccb629f13a06f9afd49a23905be256a24242
-
Size
80KB
-
MD5
5692bb1d45c3a61987daea96d5a8d998
-
SHA1
9330df228e4a38615d5ae1e851a78aaaa98c0a63
-
SHA256
34a0036a196505db6c58f8b3d121ccb629f13a06f9afd49a23905be256a24242
-
SHA512
9fdea55d558f0c9ae8e59eb2d48311fee5edb87429ff270285a08736d8a7b972609bd4a31409ad542a0f3cbbcf0ffdc46e1e39f7949f454c54046c88ee285c96
-
SSDEEP
1536:C0NOf9sN3rf+qk4I5d8+MVwWTxkFuK0oy2p3esHh:zIf925k4I5dwWWTxkFursB
Malware Config
Signatures
Files
-
34a0036a196505db6c58f8b3d121ccb629f13a06f9afd49a23905be256a24242.exe windows x86
034836241c54e15b104cbd2e8b9cc0fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygcrypt-0
crypt
cygwin1
__assert
__errno
__getreent
__main
_fcntl64
_fstat64
_geteuid32
_getpwuid32
_impure_ptr
_lseek64
_open64
abort
atof
atoi
atol
bind
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
getopt
getsockname
gettimeofday
link
localtime
malloc
memcpy
memset
optarg
optind
posix_regcomp
posix_regexec
printf
pthread_atfork
puts
read
realloc
rename
select
snprintf
sprintf
sscanf
strcmp
strcpy
strerror
strftime
strlen
strncpy
strstr
time
uname
unlink
vprintf
vsnprintf
write
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE