Static task
static1
General
-
Target
f909ae906f46a0e498a50cf17dec5feb4549e4e6e9f2d3b019364cc1eea55c92
-
Size
430KB
-
MD5
2ed3a9d630c87d7a0e42aeaed17881c1
-
SHA1
6f03c13bb8fc868ff65349f04b510a3835934742
-
SHA256
f909ae906f46a0e498a50cf17dec5feb4549e4e6e9f2d3b019364cc1eea55c92
-
SHA512
4c3b252dfcc61f8ee1776bb2715c19a89477f2feeab79bd4cf0e8fafb9c01afb027ff37046449a15233a6546c2cac7b726f2982eeb6c8d2e0c4462443a454816
-
SSDEEP
6144:CWcNmfKS4gkAr68zr2pYGOSPqQ+9ef9LLEpGVo10HRv7cLb4M8LsGE4m1iC1eFS/:KaKZgZr5X2psSPqQ2pwFV7nMQEBAP
Malware Config
Signatures
Files
-
f909ae906f46a0e498a50cf17dec5feb4549e4e6e9f2d3b019364cc1eea55c92.exe windows x86
7f1aa3f6049f7afef429580b0aa393ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexW
GetCurrentProcess
GetNamedPipeHandleStateW
GetQueuedCompletionStatus
FillConsoleOutputCharacterW
EnumSystemCodePagesW
LocalLock
GetVolumeNameForVolumeMountPointA
GetVersionExA
VerifyVersionInfoA
WriteConsoleInputA
EnumDateFormatsW
FindNextFileA
CopyFileExW
BuildCommDCBAndTimeoutsW
VirtualLock
WriteProfileStringA
VerifyVersionInfoW
GetDriveTypeW
GetFileInformationByHandle
DeleteFileA
FindNextVolumeMountPointW
TlsGetValue
LoadResource
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExW
OpenEventA
GetModuleHandleA
GetSystemDirectoryA
GetDriveTypeA
BuildCommDCBAndTimeoutsA
LoadLibraryA
GetShortPathNameW
ReleaseActCtx
GetCommandLineA
InterlockedExchange
InterlockedDecrement
CreateActCtxW
FindResourceA
FormatMessageW
GetModuleFileNameA
CreateJobObjectW
EnterCriticalSection
GetNumberOfConsoleMouseButtons
FindNextVolumeA
CreateNamedPipeW
WritePrivateProfileStringA
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
InterlockedIncrement
GetVersionExW
HeapFree
_hwrite
InterlockedCompareExchange
GetStartupInfoA
ConnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntW
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceW
GetTickCount
VirtualQueryEx
OpenFileMappingA
GetModuleHandleW
GetDefaultCommConfigA
VirtualAlloc
TerminateProcess
GetACP
GetDiskFreeSpaceExA
EnumResourceTypesA
EndUpdateResourceA
IsProcessInJob
lstrcpynW
WriteConsoleW
GetProcAddress
lstrcatA
LoadLibraryW
ReadConsoleOutputA
GetStartupInfoW
SetHandleInformation
WritePrivateProfileStructA
DeleteCriticalSection
GetFileAttributesA
GetCurrentActCtx
CopyFileA
GetDevicePowerState
ResetEvent
LockFile
MoveFileW
DisableThreadLibraryCalls
GetOverlappedResult
GetCommTimeouts
FormatMessageA
InterlockedExchangeAdd
GlobalAlloc
SetThreadPriorityBoost
SetFileShortNameW
GetFileAttributesW
SetCalendarInfoA
ConvertFiberToThread
SetComputerNameA
GetConsoleAliasesW
EnumDateFormatsA
SetTimeZoneInformation
SetConsoleOutputCP
MoveFileWithProgressW
GetStdHandle
GetLocalTime
EnumSystemLocalesW
ActivateActCtx
CreateMemoryResourceNotification
OpenSemaphoreA
GetModuleHandleExA
AddAtomW
FoldStringW
_hread
GetFileType
UnhandledExceptionFilter
GetConsoleAliasesLengthA
SetProcessShutdownParameters
lstrcpynA
GlobalUnWire
GetCompressedFileSizeA
ReadConsoleA
FreeUserPhysicalPages
WriteConsoleOutputCharacterW
TerminateJobObject
CreateFileA
SetTimerQueueTimer
SetLastError
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
LeaveCriticalSection
GetModuleFileNameW
IsDebuggerPresent
SetFilePointer
SetStdHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
Sleep
ExitProcess
SetHandleCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
ReadFile
user32
CharUpperA
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lixuxer Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kin Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.holibi Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gof Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ