Static task
static1
General
-
Target
41eb7e0e0b938279446049d0c2d4f2f3cd60337751e449635084637245db03aa
-
Size
249KB
-
MD5
e8cf8e8ea7c46ccf00fea85c09f72da5
-
SHA1
3e701044ce8565a74373f8c3ee614aff490b5198
-
SHA256
41eb7e0e0b938279446049d0c2d4f2f3cd60337751e449635084637245db03aa
-
SHA512
31d3516f348800eb949bd2ef7ade1e35a11f43e70ee9b7b5d19a95d82d320947cdfef84fa0805e9d8af18ff6dc5361995c19e5e20176d64fd0c5cc9a0f9cd10d
-
SSDEEP
3072:Vo/kpoJwoHeXijkvVD/5mqmwW84YS7vQe:6JwoHeXi24qmwB4ce
Malware Config
Signatures
Files
-
41eb7e0e0b938279446049d0c2d4f2f3cd60337751e449635084637245db03aa.exe windows x86
9f1e79040a424d41a8e04c6d4485b450
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
AddRefActCtx
OpenEventA
EnumCalendarInfoExA
WriteConsoleInputW
ReadConsoleInputA
GetSystemDirectoryW
WriteConsoleW
FreeUserPhysicalPages
WaitNamedPipeA
BuildCommDCBA
InterlockedIncrement
BeginUpdateResourceA
CancelTimerQueueTimer
GetCPInfoExW
GetModuleFileNameW
GetConsoleAliasExesLengthW
EnumTimeFormatsW
MoveFileA
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthA
GlobalAlloc
GetProcAddress
LoadLibraryW
GetUserDefaultLCID
CancelWaitableTimer
SizeofResource
WaitForMultipleObjects
lstrlenW
EnumResourceNamesA
CommConfigDialogA
SetFileAttributesW
AreFileApisANSI
LCMapStringW
GetFileAttributesA
SetConsoleTitleA
CreateHardLinkW
GetCurrentProcessId
SetLastError
GetUserDefaultLangID
GetConsoleProcessList
BuildCommDCBAndTimeoutsW
OpenJobObjectW
FindResourceExA
SetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesW
InitializeCriticalSection
SetConsoleCP
GetCPInfoExA
GetLastError
CloseHandle
FlushFileBuffers
CreateFileW
HeapSize
HeapReAlloc
HeapAlloc
MultiByteToWideChar
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
HeapFree
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
RaiseException
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
Sleep
GetStringTypeW
SetStdHandle
user32
ClientToScreen
winhttp
WinHttpWriteData
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yimadan Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ