Static task
static1
General
-
Target
7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa
-
Size
368KB
-
MD5
f740211150fd78907ad8c364e550248b
-
SHA1
b159dd4a7f266de0fde7ffac0ca4339a8193e0bd
-
SHA256
7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa
-
SHA512
4b95ee64d586655f2bb9329f3f33d9d8d0f25cc6a7f601cd79f44d7ca90c75f1d9c34e040a24729d495c42c1f39f2fb3b95336fa4d21698e82d7c48c9321b4b1
-
SSDEEP
6144:LL5jFyuXPBtxxvFSassxULkkiW/2o9NU59OKqcaXJeByakL/pqLwVgjndkFUVOj/:XjySptHvFpsUkz2oXK9BiJf5/wLwyRks
Malware Config
Signatures
Files
-
7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa.exe windows x86
8ea4ccb2c77d3f08fe7328cc4e8e11d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
SetPriorityClass
FindFirstChangeNotificationW
WritePrivateProfileStructA
GetConsoleAliasesLengthW
CopyFileExW
GetConsoleAliasExesA
GetStringTypeA
GetDriveTypeW
DebugActiveProcessStop
lstrcpynA
GetConsoleAliasExesLengthA
BuildCommDCBAndTimeoutsA
SetDllDirectoryW
EndUpdateResourceW
InterlockedIncrement
_lwrite
MoveFileExW
GetConsoleAliasA
InterlockedDecrement
GetCurrentActCtx
GetSystemWindowsDirectoryW
GetNamedPipeHandleStateA
GetModuleHandleExW
SetConsoleScreenBufferSize
WriteConsoleInputA
SetVolumeMountPointW
CallNamedPipeW
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
FindNextVolumeMountPointA
GetConsoleTitleA
GetCompressedFileSizeW
ReadConsoleOutputA
GetDateFormatA
FindActCtxSectionStringA
EnumResourceTypesA
GetPrivateProfileIntA
AddRefActCtx
TerminateThread
ReadProcessMemory
GetSystemWow64DirectoryW
FormatMessageW
GetSystemTimeAdjustment
GetFileAttributesA
GetExitCodeProcess
FindNextVolumeW
GetWriteWatch
GetFileAttributesW
VerifyVersionInfoA
GetBinaryTypeA
GetAtomNameW
GetMailslotInfo
GetCompressedFileSizeA
GetSystemDirectoryA
GetTimeZoneInformation
SetComputerNameExW
CreateActCtxA
GetFileSize
GetACP
GetVolumePathNameA
lstrlenW
SetThreadPriority
GetConsoleAliasesW
GlobalUnfix
ReleaseActCtx
GetStartupInfoA
FillConsoleOutputCharacterW
GetLastError
GetProcessHeaps
DefineDosDeviceW
CreateNamedPipeA
EnumDateFormatsExA
HeapUnlock
CopyFileA
SetComputerNameA
EnterCriticalSection
GlobalGetAtomNameA
DisableThreadLibraryCalls
BuildCommDCBW
ResetEvent
OpenWaitableTimerA
GetLocalTime
LoadLibraryA
WriteConsoleA
ProcessIdToSessionId
RegisterWaitForSingleObject
InterlockedExchangeAdd
LocalAlloc
GetFileType
WritePrivateProfileStringA
MoveFileA
SetCurrentDirectoryW
FindAtomA
SetSystemTime
GlobalWire
FindFirstChangeNotificationA
CreateWaitableTimerW
FindNextFileW
CreateMailslotA
GetStringTypeW
WriteProfileStringW
RequestWakeupLatency
VirtualProtect
EnumDateFormatsW
WaitForDebugEvent
SetCalendarInfoA
SetThreadAffinityMask
SetProcessShutdownParameters
Module32NextW
GetVersionExA
ReadConsoleInputW
TerminateJobObject
CloseHandle
GetCurrentProcessId
GetFileInformationByHandle
GetConsoleProcessList
CopyFileExA
CreateFileA
GetOverlappedResult
GetThreadContext
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetOEMCP
GetCPInfo
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
LCMapStringA
LCMapStringW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
SetFilePointer
DeleteFileA
advapi32
ImpersonateSelf
IsTokenUntrusted
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 170KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ