Static task
static1
Behavioral task
behavioral1
Sample
919aefd5602b64c5ebd886510746e07c5cc41dec0885f4fc634235949d3b596e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
919aefd5602b64c5ebd886510746e07c5cc41dec0885f4fc634235949d3b596e.exe
Resource
win10v2004-20221111-en
General
-
Target
919aefd5602b64c5ebd886510746e07c5cc41dec0885f4fc634235949d3b596e
-
Size
49KB
-
MD5
75a998a20bf65e4643bac6ff6c9e0536
-
SHA1
4023fa27592dae6666573f3ce749adf1a710ad61
-
SHA256
919aefd5602b64c5ebd886510746e07c5cc41dec0885f4fc634235949d3b596e
-
SHA512
37e3734c4df50795cf0f5eff506f9af91c0aed4df7a4b5423b1bba81625d57f6d1490c10df3666a2dda13cf189f1ee29f3ff587917740253e062cc319dae2884
-
SSDEEP
768:GDA4B5YgeS37NASLIzyaKFzqPddvrIDz:P4BBrdt+dvrIDz
Malware Config
Signatures
Files
-
919aefd5602b64c5ebd886510746e07c5cc41dec0885f4fc634235949d3b596e.exe windows x86
5c39c30763a967223ae3a05b537aff09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__main
_fopen64
_impure_ptr
_lstat64
calloc
cygwin_conv_to_full_win32_path
cygwin_conv_to_posix_path
cygwin_internal
cygwin_split_path
dll_crt0__FP11per_process
exit
fclose
free
getcwd
getenv
malloc
memset
readlink
realloc
setenv
sprintf
strcasecmp
strcat
strchr
strcpy
strdup
strlen
strncat
strncpy
strpbrk
strrchr
strspn
strtok
vsprintf
kernel32
AllocConsole
CloseHandle
CreatePipe
CreateProcessA
FreeConsole
GetCommTimeouts
GetCommandLineA
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
LoadLibraryA
ReadFile
SetCommTimeouts
SetEnvironmentVariableA
SetHandleInformation
WaitForMultipleObjects
WaitForSingleObject
user32
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE