Static task
static1
General
-
Target
b15b287c4428437f0e888db066a13543594266d3eea722499e0e5a52eefd5552
-
Size
308KB
-
MD5
5cee6f3f4af41d3bf133f12180fcf7c4
-
SHA1
5d07a9deaa9c0d7bba8c66858ac06a7898196e7c
-
SHA256
b15b287c4428437f0e888db066a13543594266d3eea722499e0e5a52eefd5552
-
SHA512
40348111c41c1003fbb9e0da84c20daa5b366712aea9fce8a96720d1796bdd0aabb8128df092bb9d2807888afbe336f8945dbf126f36cb8eeb53cfb43e344c11
-
SSDEEP
6144:F/sWW1YUKChHc1rD1aAkl+Ixw2lUZIk2mRQ3AZ24ph/X6G:CWWqxCJqn1hkl+IvYvfRQQZVph/
Malware Config
Signatures
Files
-
b15b287c4428437f0e888db066a13543594266d3eea722499e0e5a52eefd5552.exe windows x86
1ad54a3de2b5e81e1d803adf8999a3c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatW
FindFirstChangeNotificationA
GetNamedPipeHandleStateW
GetOverlappedResult
FillConsoleOutputCharacterW
GetQueuedCompletionStatus
TerminateProcess
GetCurrentProcessId
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsA
EnumDateFormatsA
GetVersionExW
VirtualLock
WriteProfileStringA
VerifyVersionInfoA
GetProcessPriorityBoost
GetPriorityClass
GetCompressedFileSizeW
FindNextVolumeMountPointW
OutputDebugStringA
GetWriteWatch
WriteConsoleInputA
LoadResource
SetComputerNameExA
GetTimeZoneInformation
LoadLibraryW
GetSystemDirectoryW
GetDriveTypeA
GetModuleHandleA
GlobalAlloc
GetShortPathNameA
ZombifyActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineW
ReadConsoleOutputCharacterA
GetCalendarInfoW
ReleaseActCtx
FindResourceA
FormatMessageW
GetModuleFileNameA
CreateJobObjectW
EnterCriticalSection
SetFirmwareEnvironmentVariableA
GetDllDirectoryW
GetExitCodeThread
LoadLibraryA
WritePrivateProfileStringA
GetConsoleAliasesLengthW
WriteProfileSectionA
InterlockedDecrement
AddAtomW
UpdateResourceA
GetVersionExA
InterlockedExchangeAdd
GetStartupInfoW
ConnectNamedPipe
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceA
GetLastError
GetSystemWindowsDirectoryW
GetSystemWow64DirectoryW
GetCPInfoExA
GetStringTypeExA
DeleteVolumeMountPointA
FatalAppExitA
SetSystemTime
OpenFileMappingW
lstrcmpA
SetConsoleCursorPosition
SetDefaultCommConfigW
lstrcatA
CopyFileW
GetACP
GetCurrencyFormatA
CreateActCtxW
GetTapeParameters
GetMailslotInfo
GetConsoleAliasW
_lwrite
GetDiskFreeSpaceExW
DefineDosDeviceW
GetAtomNameA
FlushConsoleInputBuffer
EnumResourceTypesA
lstrlenW
GetLongPathNameW
CreateJobSet
WriteConsoleW
VirtualProtect
ReadConsoleOutputW
SuspendThread
FreeLibraryAndExitThread
_hwrite
BuildCommDCBW
GetStringTypeW
GetHandleInformation
GetPrivateProfileStringA
GetComputerNameW
WritePrivateProfileSectionA
WritePrivateProfileStructA
TryEnterCriticalSection
GetPrivateProfileSectionNamesA
MoveFileA
GetVolumePathNameA
SetConsoleMode
HeapWalk
FindNextFileW
ResetEvent
ReadProcessMemory
MoveFileExA
GetVersion
ChangeTimerQueueTimer
WriteConsoleInputW
InterlockedCompareExchange
GetCommMask
SetFileShortNameA
lstrcpyA
VerLanguageNameA
FreeEnvironmentStringsW
EnumDateFormatsExW
GetProfileStringA
GetConsoleTitleA
GlobalGetAtomNameW
GetConsoleAliasesA
CreateMailslotW
SetConsoleOutputCP
MoveFileWithProgressW
GetFileInformationByHandle
GetLocalTime
FoldStringW
EnumSystemLocalesW
CallNamedPipeW
GetConsoleAliasExesLengthA
OpenSemaphoreW
GetPrivateProfileIntW
GetModuleHandleExW
WriteConsoleOutputCharacterW
SetComputerNameW
FindActCtxSectionStringW
GetTickCount
GetUserDefaultLangID
LocalLock
FindFirstVolumeW
FindClose
OpenWaitableTimerW
EnumResourceNamesA
OpenFileMappingA
GetFileType
QueueUserWorkItem
RaiseException
lstrcpynA
GlobalUnWire
GetFullPathNameW
SetThreadPriority
ReadConsoleA
AssignProcessToJobObject
CreateFileW
GetDateFormatA
DeactivateActCtx
SetCurrentDirectoryW
GetFileAttributesA
GetBinaryTypeW
SetCalendarInfoW
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RtlUnwind
HeapValidate
IsBadReadPtr
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetStdHandle
WriteFile
OutputDebugStringW
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetLocaleInfoA
ReadFile
CloseHandle
CreateFileA
DeleteFileA
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 711KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.civul Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nobil Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.muk Size: 512B - Virtual size: 34B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ