Static task
static1
General
-
Target
d4141ce78e6d94dd6f2f0520d60e0573f908c0e99d065735e7aae9c42e4d9d42
-
Size
389KB
-
MD5
c5ebb8f32a8bd4f671271d68b62bb9a9
-
SHA1
799c5031abe1acde40265d6fc189ebc02cf3bfc7
-
SHA256
d4141ce78e6d94dd6f2f0520d60e0573f908c0e99d065735e7aae9c42e4d9d42
-
SHA512
f38e4812d0142187074d66dd3e7aaeee04bd5b303f781b60acedfb26bfa8820c72dadc40b954d2c3821f23774b3f5bfdac9e1532eab86ca7a754125abeef947a
-
SSDEEP
12288:El3ORT1FItgcDtyxQ2lyuIWCNS/jUiXNKU/1sf:KO3FIGc4JlyQCM/AiXh1sf
Malware Config
Signatures
Files
-
d4141ce78e6d94dd6f2f0520d60e0573f908c0e99d065735e7aae9c42e4d9d42.exe windows x86
4adcaf15ecb190c0028e35f41c226ed5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugSetProcessKillOnExit
FindNextChangeNotification
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterW
EnumSystemCodePagesW
TerminateProcess
GetProcessId
VerifyVersionInfoW
EnumDateFormatsA
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsA
VirtualUnlock
WriteProfileStringW
SetProcessPriorityBoost
FindFirstChangeNotificationA
GetFileType
DeleteFileA
FindNextVolumeMountPointW
OutputDebugStringA
ResetWriteWatch
WriteConsoleInputW
GetConsoleTitleW
GetComputerNameExW
SetTimeZoneInformation
LoadLibraryA
GetSystemDirectoryA
GetDriveTypeA
ActivateActCtx
GetProfileSectionW
DeleteFileW
GetCommandLineW
VerifyVersionInfoA
AddRefActCtx
FindResourceW
FormatMessageA
GetModuleFileNameW
CreateJobObjectW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetDllDirectoryW
TerminateThread
CreateNamedPipeW
WritePrivateProfileStringW
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedDecrement
GetVersionExA
HeapSize
_hwrite
GetStartupInfoA
DisconnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
GetPrivateProfileIntA
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceW
InterlockedExchangeAdd
SetLastError
GetStringTypeExA
DeleteVolumeMountPointW
SetDefaultCommConfigW
lstrcpyA
GetOEMCP
_lwrite
GetQueuedCompletionStatus
GetNamedPipeHandleStateA
GetDiskFreeSpaceExW
CreateJobSet
WriteConsoleW
VirtualProtect
ReadConsoleOutputA
SetThreadContext
BuildCommDCBW
ReleaseActCtx
FoldStringA
GetHandleInformation
WritePrivateProfileSectionW
DeleteCriticalSection
GetFileAttributesA
OpenWaitableTimerA
GetVolumePathNameW
SetConsoleMode
HeapSetInformation
SetComputerNameA
FindNextFileA
SetEvent
UnlockFile
GetProcAddress
DeleteTimerQueueTimer
CopyFileW
MoveFileA
GlobalAlloc
GetCommMask
SetFileShortNameA
GetFileAttributesW
FreeEnvironmentStringsW
GetProfileStringW
GetConsoleTitleA
SetComputerNameW
GetConsoleAliasesW
CreateMailslotA
GetTimeZoneInformation
SetConsoleOutputCP
GetFileInformationByHandle
SetLocalTime
FoldStringW
CallNamedPipeA
GetConsoleAliasExesLengthW
GetCurrentActCtx
OpenSemaphoreW
GetModuleHandleExW
AddAtomW
LoadLibraryW
GetTickCount
GetLastError
LocalUnlock
SetFileTime
EnumResourceNamesW
OpenFileMappingW
UnhandledExceptionFilter
GetConsoleAliasesLengthW
GetCompressedFileSizeW
GetThreadPriority
ReadConsoleW
AssignProcessToJobObject
InterlockedIncrement
Sleep
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetCommandLineA
HeapValidate
IsBadReadPtr
GetModuleHandleA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
OutputDebugStringW
ExitProcess
GetACP
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.betikep Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kucodac Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ