Static task
static1
General
-
Target
527a69bf2acf2e3c08bc76c8af9191646099fb572a099fd207d33dc31585c072
-
Size
383KB
-
MD5
f5a59bd9a9aab27304745d9e2460ceff
-
SHA1
221c78d94566a35f538f77fee94feb734ffb2092
-
SHA256
527a69bf2acf2e3c08bc76c8af9191646099fb572a099fd207d33dc31585c072
-
SHA512
00395f1203a2ba46250d6761a421f7eed216c16b44890a1e5535b227791ea055363201e8165c7894e7d80fbc24c8f63b5a50719171f9ee7801d3ae92c118dcc6
-
SSDEEP
6144:G8rvlaozH1C0KP2G0qsJQY/O/OSnz2tMc1IIONwRjDaHkl+JRtIYwVB5PgwK:GglDzV3KP2G0aYm2S+MkIlK/lmIdVB
Malware Config
Signatures
Files
-
527a69bf2acf2e3c08bc76c8af9191646099fb572a099fd207d33dc31585c072.exe windows x86
dce19d4ae7ecf788991165dded91b2f0
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetNamedPipeHandleStateW
DosDateTimeToFileTime
CallNamedPipeA
EnumResourceTypesA
EnumResourceNamesA
TerminateProcess
ReleaseActCtx
GetConsoleAliasesLengthA
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
GetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeW
LeaveCriticalSection
ReadConsoleInputA
TlsGetValue
SetComputerNameExA
FindAtomA
BuildCommDCBAndTimeoutsW
LoadLibraryA
GlobalAlloc
EnterCriticalSection
GetCommandLineW
InterlockedIncrement
CopyFileA
OutputDebugStringA
FormatMessageA
GetPriorityClass
WritePrivateProfileStringA
HeapValidate
ExitThread
GlobalUnfix
GetProcessHeap
GetStartupInfoA
CreatePipe
GetCPInfoExW
GetWindowsDirectoryA
GetSystemWow64DirectoryA
WriteProfileSectionA
GetCalendarInfoW
ResumeThread
SetConsoleCursorInfo
SetLastError
ExitProcess
GetSystemTime
SetLocalTime
EnumCalendarInfoExW
OpenSemaphoreW
DeleteVolumeMountPointW
DebugActiveProcessStop
lstrcmpA
GetPrivateProfileSectionNamesA
IsBadHugeWritePtr
GetProcAddress
HeapLock
FindCloseChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntW
_lread
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointA
EndUpdateResourceA
WriteConsoleA
VirtualProtect
FreeEnvironmentStringsW
SetMailslotInfo
lstrcpyW
VerLanguageNameW
UnlockFile
SetSystemTime
GetFileType
GetConsoleCP
GetConsoleAliasA
GetLargestConsoleWindowSize
CreateIoCompletionPort
FindAtomW
GetConsoleAliasExesLengthA
WriteConsoleInputA
CreateMailslotA
EnumDateFormatsW
SetCommState
LockFile
_lopen
GetConsoleAliasExesLengthW
ResetWriteWatch
GetPrivateProfileStringW
ClearCommError
ChangeTimerQueueTimer
SetFirmwareEnvironmentVariableW
MoveFileW
GetConsoleDisplayMode
GetSystemDefaultLangID
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToANSI
OpenWaitableTimerW
GetProcessId
GetNamedPipeHandleStateA
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
WriteProfileStringW
AddAtomA
WriteConsoleOutputCharacterA
QueryInformationJobObject
QueryDosDeviceA
InitAtomTable
VirtualAlloc
GetBinaryTypeW
GetSystemWindowsDirectoryA
GetLastError
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
GetStartupInfoW
IsBadReadPtr
DeleteCriticalSection
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
WriteConsoleW
OutputDebugStringW
LoadLibraryW
WideCharToMultiByte
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
user32
OemToCharA
advapi32
GetFileSecurityW
winhttp
WinHttpReadData
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ