Static task
static1
General
-
Target
b20eeef9ce54ba8b739ab0af0f50c0d16ee64f1234669e62b11f596520294cf5
-
Size
265KB
-
MD5
f59df1e373fb415c4eff9577a93bbe09
-
SHA1
3f36108b67fd75e83bdb1a38fa4b9bf14d01c811
-
SHA256
b20eeef9ce54ba8b739ab0af0f50c0d16ee64f1234669e62b11f596520294cf5
-
SHA512
ca8e8d40235b5f44c2b29a4b5f0c42a6580d75bc0d4662bd4d78c5fca17c60540fae156cf0943779ae8448ee90868560bd1b5eb38e88f4fd6372f2e4a460c22d
-
SSDEEP
6144:IBoT6aRV3tUMT/Eg/pXLlO8mdVroSM81dN7tlGc:IuTlJuMT/5pJO3dVr7dVtoc
Malware Config
Signatures
Files
-
b20eeef9ce54ba8b739ab0af0f50c0d16ee64f1234669e62b11f596520294cf5.exe windows x86
2d5f1ef6d781c0b0c9d1b00cbdec429f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
FindFirstChangeNotificationW
GetNamedPipeHandleStateW
GetOverlappedResult
FillConsoleOutputCharacterW
GetQueuedCompletionStatus
TerminateProcess
GetCurrentProcessId
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsA
EnumDateFormatsA
GetVersionExW
VirtualLock
WriteProfileStringA
VerifyVersionInfoA
GetProcessPriorityBoost
GetPriorityClass
GetCompressedFileSizeW
FindNextVolumeMountPointW
OutputDebugStringW
GetWriteWatch
WriteConsoleInputA
GetConsoleTitleA
SetComputerNameExW
GetTimeZoneInformation
LoadLibraryW
GetSystemDirectoryW
GetDriveTypeA
GetModuleHandleA
GlobalAlloc
GetShortPathNameA
ZombifyActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineW
ReleaseActCtx
FindResourceA
FormatMessageA
GetModuleFileNameA
CreateJobObjectW
EnterCriticalSection
SetFirmwareEnvironmentVariableA
GetDllDirectoryA
GetExitCodeThread
LoadLibraryA
WritePrivateProfileStringA
GetConsoleAliasesLengthW
WriteProfileSectionA
InterlockedDecrement
AddAtomA
UpdateResourceW
GetVersionExA
HeapValidate
_hwrite
InterlockedExchangeAdd
GetStartupInfoW
GetConsoleAliasExesA
DebugBreak
EndUpdateResourceA
GetLastError
GetCPInfoExA
GetSystemWow64DirectoryW
DisconnectNamedPipe
GetStringTypeExW
DeleteVolumeMountPointA
FatalAppExitA
SetSystemTime
OpenFileMappingW
lstrcmpA
SetConsoleCursorPosition
SetDefaultCommConfigW
GetACP
GetCurrencyFormatA
CreateActCtxW
GetTapeParameters
GetMailslotInfo
GetConsoleAliasW
_lwrite
GetDiskFreeSpaceExA
DefineDosDeviceW
GetAtomNameA
FlushConsoleInputBuffer
EnumResourceTypesA
lstrlenW
GetLongPathNameW
CreateJobSet
WriteConsoleW
VirtualProtect
ReadConsoleOutputW
SuspendThread
BuildCommDCBW
FoldStringA
GetHandleInformation
GetComputerNameW
WritePrivateProfileSectionA
WritePrivateProfileStructA
TryEnterCriticalSection
GetPrivateProfileSectionNamesA
CopyFileW
GetVolumePathNameA
SetConsoleMode
HeapWalk
FindNextFileW
ResetEvent
ReadProcessMemory
GetProcAddress
ChangeTimerQueueTimer
InterlockedCompareExchange
MoveFileA
GetCommMask
SetFileShortNameA
VerLanguageNameA
FreeEnvironmentStringsA
EnumDateFormatsExW
GetSystemWindowsDirectoryW
GetProfileStringA
GlobalGetAtomNameW
SetComputerNameW
GetConsoleAliasesA
CreateMailslotW
SetConsoleOutputCP
MoveFileWithProgressW
GetFileInformationByHandle
GetLocalTime
FoldStringW
CallNamedPipeW
GetConsoleAliasExesLengthA
CopyFileExW
OpenSemaphoreA
GetPrivateProfileIntA
GetModuleHandleExW
WriteConsoleOutputCharacterW
FindActCtxSectionStringW
GetTickCount
FreeLibraryAndExitThread
GetUserDefaultLangID
LocalLock
FindFirstVolumeW
FindClose
OpenWaitableTimerA
EnumResourceNamesA
OpenFileMappingA
GetFileType
QueueUserWorkItem
RaiseException
lstrcpynW
GetFullPathNameA
SetThreadPriority
ReadConsoleA
AssignProcessToJobObject
CreateFileW
GetDateFormatA
DeactivateActCtx
GetConsoleAliasExesW
SetCurrentDirectoryW
GetFileAttributesA
GetBinaryTypeW
SetCalendarInfoA
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RtlUnwind
GetModuleHandleW
ExitProcess
DeleteFileA
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetStdHandle
WriteFile
OutputDebugStringA
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 41.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gas Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kexobey Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fojo Size: 512B - Virtual size: 34B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ