Static task
static1
General
-
Target
fe4d26e9b1918bda1954010e0663132d44aef8b7d3192db79cb17427beb11260
-
Size
291KB
-
MD5
0aa145be799e0d23197ac24adee25a93
-
SHA1
d7523f7fdda38a239eede78725e7c8ecd73e9d5b
-
SHA256
fe4d26e9b1918bda1954010e0663132d44aef8b7d3192db79cb17427beb11260
-
SHA512
6f6cc19ddc75eab5a8525aa55e65eb8cca201009da2b05843c418648f56053b77ce3caab87da7219ae3b61b509572ae3f1588df11ddd4bfb5e7dc47540221c47
-
SSDEEP
6144:IzLb1VAEzxw/DR1laXLHIXUyYRZgskAYibNVE9dqrBH:on1VAEy/NqXNyWVjjW
Malware Config
Signatures
Files
-
fe4d26e9b1918bda1954010e0663132d44aef8b7d3192db79cb17427beb11260.exe windows x86
fb36cbf3daccf099a44d5983b13298b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigW
InitializeSListHead
SetHandleInformation
FreeEnvironmentStringsA
GetConsoleAliasesLengthA
GetCompressedFileSizeW
GetLocaleInfoW
SetSystemTimeAdjustment
GetConsoleAliasExesLengthW
GetFileAttributesW
SetTimeZoneInformation
GetAtomNameW
GetModuleFileNameW
GetVolumePathNameA
WritePrivateProfileStringW
CreateJobObjectA
GetLastError
IsDBCSLeadByteEx
GetLongPathNameA
HeapSize
CreateJobSet
SetConsoleTextAttribute
CreateMemoryResourceNotification
GetAtomNameA
LoadLibraryA
LocalAlloc
GetProfileStringA
BeginUpdateResourceA
GetCommMask
GetTapeParameters
GlobalFindAtomW
GetModuleHandleA
VirtualProtect
SetCalendarInfoA
GetCurrentProcessId
SetFileAttributesW
LCMapStringW
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetLocalTime
FreeLibrary
EnumDateFormatsExW
WriteConsoleOutputCharacterW
SetFilePointer
SetPriorityClass
RemoveVectoredExceptionHandler
EnterCriticalSection
GetEnvironmentVariableW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
LeaveCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
RtlUnwind
HeapFree
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
SetConsoleCtrlHandler
InterlockedExchange
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
SetEndOfFile
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetUserObjectInformationW
GetProcessDefaultLayout
GetClassLongW
gdi32
GetBoundsRect
advapi32
GetPrivateObjectSecurity
EqualSid
RegCreateKeyW
OpenEventLogW
PrivilegedServiceAuditAlarmA
GetEventLogInformation
Sections
.text Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ