Static task
static1
General
-
Target
a30ba96e21a5300a5e4ab1a098e78f955fe8683338392b5e78b97d49f7470189
-
Size
261KB
-
MD5
9c17d74d9ad41728e29f4c605a9d25b1
-
SHA1
5b6240ad09e0ab2b4fff4a2c27ffa7489fec6f94
-
SHA256
a30ba96e21a5300a5e4ab1a098e78f955fe8683338392b5e78b97d49f7470189
-
SHA512
ce5086675486826360fa5e3df5cd19626e5625b256242109a10486884331c7ed78ac0a0c9d588a5cd40a3d9ccd184c6175f5c37198840e4f470fc40c364530bd
-
SSDEEP
6144:xrhV2soUXFOWJGIitlGpaTVZGcQpVrJYI:xrhYs1VOWJGIi/PTVZGcQpVV
Malware Config
Signatures
Files
-
a30ba96e21a5300a5e4ab1a098e78f955fe8683338392b5e78b97d49f7470189.exe windows x86
b88da3f1e73518bb3e8d17092b704138
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
FindFirstChangeNotificationW
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterA
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcessId
GetVersionExA
EnumDateFormatsA
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsA
VirtualUnlock
WriteProfileStringA
VerifyVersionInfoA
SetProcessPriorityBoost
GetDriveTypeW
GetPriorityClass
GetCompressedFileSizeA
FindNextVolumeMountPointW
OutputDebugStringA
GetWriteWatch
WriteConsoleInputA
WriteConsoleInputW
GetConsoleTitleA
SetComputerNameExA
GetTimeZoneInformation
LoadLibraryW
GetSystemDirectoryA
GetDriveTypeA
LoadLibraryA
GetShortPathNameA
ActivateActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineA
InterlockedExchangeAdd
ReleaseActCtx
FindResourceW
FormatMessageA
GetModuleFileNameW
CreateJobObjectW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetDllDirectoryW
GetExitCodeThread
GetNamedPipeHandleStateA
WritePrivateProfileStringW
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
UpdateResourceW
InterlockedDecrement
HeapSize
_hwrite
InterlockedExchange
GetStartupInfoW
DisconnectNamedPipe
GetCPInfoExA
GetSystemWow64DirectoryW
SetLastError
GetConsoleAliasExesA
DebugBreak
EndUpdateResourceW
GetLastError
GetStringTypeExW
GetConsoleAliasesLengthA
DeleteVolumeMountPointW
FatalAppExitA
ProcessIdToSessionId
lstrcmpW
SetConsoleCursorPosition
SetDefaultCommConfigA
VirtualAlloc
GetOEMCP
CreateActCtxW
GetMailslotInfo
GetConsoleAliasW
_lwrite
GetDiskFreeSpaceExA
AddVectoredExceptionHandler
WriteConsoleA
VirtualProtect
ReadConsoleOutputW
GetThreadContext
BuildCommDCBA
WritePrivateProfileStringA
GetHandleInformation
GetComputerNameA
WritePrivateProfileSectionW
TryEnterCriticalSection
GetPrivateProfileSectionNamesA
OpenWaitableTimerW
CopyFileW
MoveFileW
GetVolumePathNameA
GetConsoleMode
HeapWalk
SetComputerNameA
FindNextFileA
ResetEvent
UnlockFileEx
MoveFileA
GetProcAddress
GetOverlappedResult
ChangeTimerQueueTimer
VerifyVersionInfoW
GlobalAlloc
SetCommMask
SetFileShortNameW
FreeEnvironmentStringsW
FindActCtxSectionStringW
GetSystemWindowsDirectoryA
GetProfileStringW
GlobalGetAtomNameA
SetComputerNameW
GetConsoleAliasesA
CreateMailslotW
EnumDateFormatsW
GetConsoleOutputCP
MoveFileWithProgressA
SetLocalTime
FoldStringA
CallNamedPipeA
GetConsoleAliasExesLengthW
FindActCtxSectionStringA
CopyFileExW
OpenSemaphoreA
GetModuleHandleExA
WriteConsoleOutputCharacterA
GetFileAttributesA
GetTickCount
LocalUnlock
GetFileTime
EnumResourceNamesW
OpenFileMappingA
GetFileType
RaiseException
ReadConsoleA
GetFileInformationByHandle
InterlockedIncrement
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
DeleteFileA
HeapValidate
IsBadReadPtr
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
WriteConsoleW
OutputDebugStringW
ExitProcess
GetACP
GetCPInfo
IsValidCodePage
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
ReadFile
CloseHandle
CreateFileA
Sections
.text Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.waja Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kifo Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ