Static task
static1
General
-
Target
0d3d8cc41f1cd817bf824656750906136e6020b585d5f452883f83464040b64d
-
Size
450KB
-
MD5
975a8cc5495d629444acb474500cc637
-
SHA1
7467e658feb7c8558b32ad0162b912f9098e2a9c
-
SHA256
0d3d8cc41f1cd817bf824656750906136e6020b585d5f452883f83464040b64d
-
SHA512
5845c7d20728bfe95193a631dc1b6c2c095943d1455a661a8e13ff427aac59f8ae723d607c67a6144daab88310f4fce62da96604e177960f31b4c5b2a78b0266
-
SSDEEP
12288:/7UfjbT/W43Ad1jtryHpmpo5PxruFhLV+W5sf:TUKC+15sQpoRxruF3s
Malware Config
Signatures
Files
-
0d3d8cc41f1cd817bf824656750906136e6020b585d5f452883f83464040b64d.exe windows x86
c5e840001d7fe6be52fb0b5fc96526c7
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
WaitForSingleObject
GetNamedPipeHandleStateW
DosDateTimeToFileTime
CallNamedPipeA
EnumResourceTypesA
EnumResourceNamesA
TerminateProcess
ReleaseActCtx
GetConsoleAliasesLengthW
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
GetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeW
LeaveCriticalSection
WriteConsoleInputW
TlsGetValue
SetComputerNameExA
FindAtomA
BuildCommDCBAndTimeoutsW
GlobalAlloc
EnterCriticalSection
GetCommandLineW
InterlockedIncrement
CopyFileA
OutputDebugStringA
FormatMessageW
GetPriorityClass
WritePrivateProfileStringA
HeapValidate
ExitThread
GlobalUnfix
GetProcessHeap
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetWindowsDirectoryA
GetSystemWow64DirectoryA
WriteProfileSectionA
GetCalendarInfoW
DebugBreak
SetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointW
DebugActiveProcessStop
GetConsoleAliasExesLengthW
lstrcmpA
GetPrivateProfileSectionNamesA
IsBadHugeWritePtr
GetProcAddress
GetSystemWindowsDirectoryA
FindCloseChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointA
EndUpdateResourceA
WriteConsoleA
VirtualProtect
InterlockedPushEntrySList
GetLastError
GetFileAttributesExA
FileTimeToSystemTime
GetVolumePathNameW
GetConsoleMode
HeapSetInformation
GetComputerNameA
FindActCtxSectionStringW
WriteProcessMemory
MoveFileExA
DisableThreadLibraryCalls
GlobalCompact
UnregisterWait
DeleteAtom
FormatMessageA
FatalExit
InterlockedCompareExchange
WaitNamedPipeW
GetSystemTime
SetLocalTime
FreeEnvironmentStringsW
GetOverlappedResult
GetPrivateProfileStructA
EnumCalendarInfoExW
OpenSemaphoreA
SetMailslotInfo
lstrcpyW
VerLanguageNameW
SetSystemTime
GetFileType
SetConsoleCP
GetConsoleAliasA
GetLargestConsoleWindowSize
CreateIoCompletionPort
WriteConsoleInputA
CreateMailslotA
EnumDateFormatsA
SetCommState
_lopen
ResetWriteWatch
GetPrivateProfileStringW
ClearCommError
LockFile
GetConsoleAliasExesLengthA
ChangeTimerQueueTimer
SetFirmwareEnvironmentVariableW
MoveFileW
GetConsoleDisplayMode
GetSystemDefaultLangID
SetFilePointer
PostQueuedCompletionStatus
AreFileApisANSI
OpenWaitableTimerW
GetProcessId
GetNamedPipeHandleStateA
FillConsoleOutputCharacterA
FindNextVolumeMountPointA
WriteProfileStringA
AddAtomA
WriteConsoleOutputCharacterA
QueryInformationJobObject
QueryDosDeviceW
GetBinaryTypeW
VirtualAlloc
InitAtomTable
DeleteCriticalSection
LoadLibraryA
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
GetCommandLineA
IsBadReadPtr
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetConsoleCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
user32
OemToCharW
advapi32
GetFileSecurityW
winhttp
WinHttpReadData
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 38.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ