Static task
static1
General
-
Target
f7e018ad50b5a66244c4bcd9b2c572cd16f7724a393089120ccd519a7633682a
-
Size
388KB
-
MD5
2eb2c59d3395beed3e2eeeb67efe82b0
-
SHA1
9776f489b8255932f8a354cbdf523d3b2d61f080
-
SHA256
f7e018ad50b5a66244c4bcd9b2c572cd16f7724a393089120ccd519a7633682a
-
SHA512
ed2e086b871c1d2633900b57a0752a16a481efd783479133b974f45a81c9d8799f87c8607900f11594618a3eaddb2b8c6e411eec6c409f15f110ad344ccba58a
-
SSDEEP
12288:bN0b6bsKOgXpEEDxlsCGfl7IkwGeazeLNpyiv2M:a+YKOupE4NGflkr6zipyie
Malware Config
Signatures
Files
-
f7e018ad50b5a66244c4bcd9b2c572cd16f7724a393089120ccd519a7633682a.exe windows x86
7187e096c439540199df120231e1a0c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreakProcess
FindFirstChangeNotificationW
GetNamedPipeHandleStateW
CreateIoCompletionPort
FreeLibraryAndExitThread
TerminateProcess
GetProcessId
VerifyVersionInfoW
EnumDateFormatsW
FillConsoleOutputCharacterW
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsA
VirtualUnlock
WriteProfileStringW
VerifyVersionInfoA
SetProcessPriorityBoost
GetDriveTypeW
FindFirstChangeNotificationA
GetFileType
DeleteFileA
FindNextVolumeMountPointA
OutputDebugStringA
ResetWriteWatch
WriteConsoleInputA
WriteConsoleInputW
GetConsoleTitleW
GetComputerNameExW
SetTimeZoneInformation
LoadLibraryA
GetSystemDirectoryA
GetDriveTypeA
ActivateActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineW
InterlockedIncrement
AddRefActCtx
FindResourceA
FormatMessageA
GetModuleFileNameW
CreateJobObjectW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetDllDirectoryW
GetExitCodeThread
WritePrivateProfileStringW
GetConsoleAliasesLengthW
WriteProfileSectionW
AddAtomA
InterlockedDecrement
GetVersionExA
HeapSize
_hwrite
GetStartupInfoA
DisconnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
GetPrivateProfileIntW
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceW
SetLastError
InterlockedExchangeAdd
GetStringTypeExW
DeleteVolumeMountPointW
OpenFileMappingA
SetDefaultCommConfigW
lstrcpyA
TerminateThread
GetACP
_lwrite
GetQueuedCompletionStatus
GetNamedPipeHandleStateA
GetDiskFreeSpaceExW
RemoveVectoredExceptionHandler
WriteConsoleW
VirtualProtect
ReadConsoleOutputW
SetThreadContext
BuildCommDCBA
ReleaseActCtx
GetHandleInformation
WritePrivateProfileSectionW
DeleteCriticalSection
GetFileAttributesA
OpenWaitableTimerW
GetVolumePathNameW
SetConsoleMode
HeapSetInformation
SetComputerNameA
FindNextFileA
SetEvent
UnlockFile
GetProcAddress
DeleteTimerQueueTimer
CopyFileW
MoveFileA
GlobalAlloc
GetCommMask
SetFileShortNameA
GetFileAttributesW
FreeEnvironmentStringsW
GetProfileStringA
GetConsoleTitleA
SetComputerNameW
GetConsoleAliasesW
CreateMailslotA
EnumDateFormatsA
GetTimeZoneInformation
SetConsoleOutputCP
GetFileInformationByHandle
SetLocalTime
CallNamedPipeA
GetConsoleAliasExesLengthW
GetCurrentActCtx
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
FoldStringW
GetTickCount
GetLastError
LocalUnlock
GetFileTime
EnumResourceNamesW
OpenFileMappingW
UnhandledExceptionFilter
GetConsoleAliasesLengthA
GetCompressedFileSizeW
GetThreadPriority
ReadConsoleA
AssignProcessToJobObject
Sleep
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetCommandLineA
HeapValidate
IsBadReadPtr
GetModuleHandleA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
OutputDebugStringW
ExitProcess
GetOEMCP
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 173KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ravikel Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fomelay Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ