Static task
static1
General
-
Target
21ce422164fd4587da58e19dae615ad3ccd8bb895e8c7bd4354b4262de3d8167
-
Size
215KB
-
MD5
9d80f82158b4355f87ca968a54492ad5
-
SHA1
f7348be7badc8eaac931c3ee697ef8bb558d554e
-
SHA256
21ce422164fd4587da58e19dae615ad3ccd8bb895e8c7bd4354b4262de3d8167
-
SHA512
2a1156d21c6ac8e551e407a861b8a1b40427246860867d6b6a64f8d68c1b93f8f870758749a1879a42019166c5d50d50120d7e4a0a7bc96f35eef23580ccd605
-
SSDEEP
3072:asrXnPXyTDG3HH/Zz9foqEM+QLkQxKCIP5yvwJCZI:aunPXy6HBz9gQjxKlBKxI
Malware Config
Signatures
Files
-
21ce422164fd4587da58e19dae615ad3ccd8bb895e8c7bd4354b4262de3d8167.exe windows x86
bfb5e263a4c39241200c68004ba1d3e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthW
OpenEventA
InterlockedDecrement
EnumCalendarInfoExW
InterlockedIncrement
WriteConsoleInputA
ReadConsoleInputA
GetSystemDirectoryA
MoveFileExW
WriteConsoleW
FreeUserPhysicalPages
BuildCommDCBW
VerifyVersionInfoW
WaitNamedPipeA
BeginUpdateResourceA
CancelTimerQueueTimer
GetCPInfoExA
GetModuleFileNameW
GetConsoleAliasExesLengthA
EnumTimeFormatsA
MoveFileA
ReadConsoleOutputCharacterA
GlobalAlloc
GetProcAddress
GetUserDefaultLangID
LockResource
LoadResource
WaitForMultipleObjects
lstrlenW
EnumResourceNamesW
CreateDirectoryW
RemoveDirectoryA
CommConfigDialogA
SetFileAttributesA
AreFileApisANSI
OpenJobObjectA
LCMapStringA
GetFileAttributesA
SetConsoleTitleW
CreateHardLinkW
GetSystemDefaultLangID
GetCurrentProcessId
GetConsoleProcessList
SetLastError
GetCommMask
BuildCommDCBAndTimeoutsW
FreeLibrary
AddRefActCtx
SetFileTime
GetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesA
InitializeCriticalSection
SetConsoleCP
GetLastError
LoadLibraryW
LoadLibraryA
WideCharToMultiByte
GetStringTypeW
InterlockedExchange
MultiByteToWideChar
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
user32
ClientToScreen
gdi32
GetTextExtentPoint32A
advapi32
DeregisterEventSource
BackupEventLogW
CloseEventLog
winhttp
WinHttpWriteData
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fakar Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ