Static task
static1
General
-
Target
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb
-
Size
386KB
-
MD5
360598965de17bfbe7617a00909a33fc
-
SHA1
f466593397d8731339a8398b5ea6c72f893ff3e1
-
SHA256
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb
-
SHA512
938cf3a99e3e068a0e765ac2e04ecbd392618452db3838a89af9163fc8c181ec0777f6b26629b8653e9eb1366d4b60b90d8e20ed8898863febfe4bd85345afd2
-
SSDEEP
12288:nI+mqb49KPmxSi++FrurqWRbX+4HBnQ91:h+KuQi+TZX6
Malware Config
Signatures
Files
-
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb.exe windows x86
58e28c6e49810551935982039359869b
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
WaitForSingleObject
GetNamedPipeHandleStateW
DosDateTimeToFileTime
CallNamedPipeA
EnumResourceTypesA
EnumResourceNamesA
TerminateProcess
ReleaseActCtx
GetConsoleAliasesLengthA
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
GetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeW
LeaveCriticalSection
ReadConsoleInputA
TlsGetValue
SetComputerNameExA
FindAtomA
BuildCommDCBAndTimeoutsW
GlobalAlloc
EnterCriticalSection
GetCommandLineW
InterlockedIncrement
CopyFileA
OutputDebugStringA
FormatMessageW
GetPriorityClass
WritePrivateProfileStringA
HeapValidate
ExitThread
GlobalUnfix
GetProcessHeap
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetWindowsDirectoryA
GetSystemWow64DirectoryA
WriteProfileSectionA
GetCalendarInfoW
DebugBreak
SetConsoleCursorInfo
SetLastError
ExitProcess
GetSystemTime
SetLocalTime
EnumCalendarInfoExW
OpenSemaphoreW
DeleteVolumeMountPointW
DebugActiveProcessStop
lstrcmpA
GetPrivateProfileSectionNamesA
IsBadHugeWritePtr
GetProcAddress
GetLastError
FindCloseChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointA
EndUpdateResourceA
WriteConsoleA
VirtualProtect
FreeEnvironmentStringsW
SetMailslotInfo
lstrcpyW
VerLanguageNameW
UnlockFile
SetSystemTime
GetFileType
SetConsoleCP
GetConsoleAliasA
GetLargestConsoleWindowSize
CreateIoCompletionPort
FindAtomW
GetConsoleAliasExesLengthA
WriteConsoleInputA
CreateMailslotA
EnumDateFormatsA
SetCommState
LockFile
_lopen
GetConsoleAliasExesLengthW
ResetWriteWatch
GetPrivateProfileStringW
ClearCommError
ChangeTimerQueueTimer
SetFirmwareEnvironmentVariableW
MoveFileW
GetConsoleDisplayMode
GetSystemDefaultLangID
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToANSI
OpenWaitableTimerW
GetProcessId
GetNamedPipeHandleStateA
FillConsoleOutputCharacterA
FindNextVolumeMountPointA
WriteProfileStringW
AddAtomA
WriteConsoleOutputCharacterA
QueryInformationJobObject
QueryDosDeviceA
InitAtomTable
VirtualAlloc
GetBinaryTypeW
GetSystemWindowsDirectoryA
LoadLibraryA
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
GetCommandLineA
IsBadReadPtr
DeleteCriticalSection
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
user32
OemToCharA
advapi32
GetFileSecurityW
winhttp
WinHttpReadData
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ