Static task
static1
Behavioral task
behavioral1
Sample
ce4607c1c7355353a6dcd7b63cd3359f36f5694092f7b7e09c22b7426144a73b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce4607c1c7355353a6dcd7b63cd3359f36f5694092f7b7e09c22b7426144a73b.exe
Resource
win10v2004-20220812-en
General
-
Target
ce4607c1c7355353a6dcd7b63cd3359f36f5694092f7b7e09c22b7426144a73b
-
Size
96KB
-
MD5
029eff2cf2f09b3d131c82f1e78a86a8
-
SHA1
271b9a8dd183e53207ebea0a1e5bf77eb989ebce
-
SHA256
ce4607c1c7355353a6dcd7b63cd3359f36f5694092f7b7e09c22b7426144a73b
-
SHA512
101dc13ebb9a4d4a533ecb0e31feaa9fbab88e5d727b86feea406bd3517d21e7c4826fa5ae5cda3dc1268cfee6fad0992783c416621c749993cbf3e9a6088082
-
SSDEEP
1536:M0yMXLYz9RGOUc/v914021TJjCw/g76Oqk3ETyD5ieERKkW5vzzSuo7gvzu:1LYz9RGOUc33Y1TBH/gnqk3gyD9pNXi
Malware Config
Signatures
Files
-
ce4607c1c7355353a6dcd7b63cd3359f36f5694092f7b7e09c22b7426144a73b.exe windows x86
f7a3e37433a68ccbfb0cf4269e8504da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
_chown32
_dll_crt0@0
_fdopen64
_fopen64
_impure_ptr
_lstat64
_stat64
calloc
canonicalize_file_name
chmod
close
cygwin_detach_dll
cygwin_internal
dirname
dll_dllcrt0
exit
fclose
fileno
fprintf
fputs
free
getc
getenv
malloc
mkstemp
putc
realloc
rename
setlocale
setmode
sprintf
strcasecmp
strcpy
strdup
strerror
strlen
strrchr
umask
ungetc
unlink
utime
cygintl-8
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
cyggcc_s-1
__deregister_frame_info
__register_frame_info
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 304B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE