Static task
static1
Behavioral task
behavioral1
Sample
7574e170994875de0ed2548d02e67f6aa6aac01f77620d10813fe99db57f0c88.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7574e170994875de0ed2548d02e67f6aa6aac01f77620d10813fe99db57f0c88.exe
Resource
win10v2004-20220812-en
General
-
Target
7574e170994875de0ed2548d02e67f6aa6aac01f77620d10813fe99db57f0c88
-
Size
117KB
-
MD5
c3277c1860eb45e3362641881b64a641
-
SHA1
1fc35f4706d988ed0f7387db83977c6bca8ea9fc
-
SHA256
7574e170994875de0ed2548d02e67f6aa6aac01f77620d10813fe99db57f0c88
-
SHA512
29be30ed930cf217fd1cacf520bbea5bede936ef644b37bfd8fbbd2ae319733bbbc5c9172dcbef1799b7317d6a7dae42af79491b9c802c262843e53f565f393b
-
SSDEEP
1536:stx2NuLsO7gGBipOKd0VQIoT2XoVRSzu5Ie89qWLXkPHIxSj4gcvzzfrIOro/yF2:sTkuLUGQXd09XSRe/q9o6YrzUO0yLeT
Malware Config
Signatures
Files
-
7574e170994875de0ed2548d02e67f6aa6aac01f77620d10813fe99db57f0c88.exe windows x86
b32acaa0cb5d2699faad6895aa9e2914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
cygwin1
__errno
__getreent
__main
_ctype_
_fopen64
_fstat64
_getegid32
_geteuid32
_getgid32
_getuid32
_lseek64
_open64
_stat64
abort
atoi
bcopy
calloc
close
creat
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fgetc
fgets
fileno
free
fsync
getc
getenv
getpid
ioctl
isatty
kill
longjmp
malloc
memcpy
memset
pclose
popen
putc
read
realloc
setjmp
setlocale
sigemptyset
signal
sigprocmask
sleep
sprintf
strcasecmp
strcat
strchr
strcmp
strcpy
strdup
strerror
strlen
strncmp
strncpy
strsep
strstr
strtoul
system
tcgetattr
tcsetattr
time
write
cygpcre-0
pcre_compile
pcre_exec
pcre_free
pcre_free
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE