Static task
static1
General
-
Target
a1e3bdcce3d07f6bc4015659a1a334413e619e39d89f5e8cf9304b7f44a93c36
-
Size
303KB
-
MD5
f2916222c3c59c2dc07859447acd4419
-
SHA1
52f83a6127ac36108130a89057378dcfb3bfd91b
-
SHA256
a1e3bdcce3d07f6bc4015659a1a334413e619e39d89f5e8cf9304b7f44a93c36
-
SHA512
319facb7d2bfc14429c959c4443b4cafbae8200bcd2b9e866a7fb7f6de2a9c9dac70fd2c1a1bef3e908c80f5bcace28106dd8373b128e0c7891e59146320d857
-
SSDEEP
6144:nMfHcBkDJIdGc/JoSaKcnN3VJiNFghP3pMRgFy:nMcBJGWIKghiM3pMRYy
Malware Config
Signatures
Files
-
a1e3bdcce3d07f6bc4015659a1a334413e619e39d89f5e8cf9304b7f44a93c36.exe windows x86
17808cbb6f8026a5758f0bcd09768e68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
OpenEventW
InterlockedIncrement
GetSystemDirectoryA
MoveFileExA
GlobalFree
GetCPInfoExA
BeginUpdateResourceA
EnumCalendarInfoExW
MoveFileA
CopyFileA
GetConsoleAliasesLengthW
LocalAlloc
GetProcAddress
EnumResourceNamesW
RemoveDirectoryW
CommConfigDialogW
SetFileAttributesA
SetCommTimeouts
OpenJobObjectW
LCMapStringA
GetAtomNameA
GetFileAttributesW
SetConsoleTitleW
ReplaceFileA
GetBinaryTypeA
GetShortPathNameW
GetUserDefaultLangID
GetGeoInfoW
GetConsoleAliasW
GetLastError
GetTickCount
GetCurrentProcess
FreeLibrary
GetEnvironmentStringsW
SetFileTime
FindResourceExW
SetConsoleMode
GetDiskFreeSpaceA
ResetEvent
WaitForMultipleObjects
SetDefaultCommConfigW
LoadLibraryW
WriteConsoleW
HeapFree
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RtlUnwind
HeapAlloc
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
IsProcessorFeaturePresent
Sleep
HeapSize
GetModuleHandleW
ExitProcess
CloseHandle
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
gdi32
GetTextExtentPoint32A
ole32
CoRevokeMallocSpy
Sections
.text Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cif Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yedut Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fetec Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sapifa Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ