Static task
static1
General
-
Target
e71fb2516818e5577cdd398503839ab3913084878c925a01212fd8e9eb0a3efd
-
Size
279KB
-
MD5
abedce5c748df5b9674c0742a23cd881
-
SHA1
af815e6eec3048e30dff14a46447d5cef7df6b25
-
SHA256
e71fb2516818e5577cdd398503839ab3913084878c925a01212fd8e9eb0a3efd
-
SHA512
ce322a1a414e4b8ab895ea8ec0a843101ad0a8fa99608577924f7b4aba88f9e71b6e25e751fdef805364bf0a9c1a15dd1be41a6efd1614e2379fa0b1614dac37
-
SSDEEP
6144:LJYP7Hm/PkhgxCv4KUKEUhUkn6XyYpjXdN4A1szS:dsIPkCCvfUKEUhd6iYpjXdM
Malware Config
Signatures
Files
-
e71fb2516818e5577cdd398503839ab3913084878c925a01212fd8e9eb0a3efd.exe windows x86
93d276e86c2036c2860102b750e58ee8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsW
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameA
VerifyVersionInfoA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
LockFile
GetProfileSectionW
QueryDosDeviceA
IsSystemResumeAutomatic
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenA
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
GetConsoleTitleW
GetComputerNameExA
OpenEventW
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryW
SetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
LoadLibraryA
MoveFileWithProgressA
GetCommandLineA
InterlockedExchangeAdd
InterlockedIncrement
SearchPathW
CreateActCtxW
FormatMessageW
GetModuleHandleA
EnterCriticalSection
CreateNamedPipeA
GetSystemDefaultLangID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
InterlockedDecrement
HeapFree
_hwrite
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
IsDBCSLeadByte
GetSystemWow64DirectoryW
WriteConsoleInputA
GetPrivateProfileIntW
GetConsoleAliasExesLengthW
DebugBreak
GetTickCount
VerifyVersionInfoW
VirtualAlloc
GetOEMCP
lstrcpyA
GetMailslotInfo
GetDiskFreeSpaceExA
WriteConsoleW
EnumSystemLocalesA
FileTimeToSystemTime
ResetEvent
CreateMutexA
FindResourceA
SetCommState
FormatMessageA
ConvertThreadToFiber
GetConsoleSelectionInfo
LocalAlloc
lstrcpyW
HeapReAlloc
GetFileAttributesA
GetSystemWindowsDirectoryA
GetConsoleTitleA
ReadConsoleInputW
GetComputerNameA
GetPrivateProfileStructW
LocalUnlock
OpenWaitableTimerW
EnumResourceNamesA
FillConsoleOutputCharacterA
GetFullPathNameW
GetThreadPriority
FreeUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectW
CreateFileA
BuildCommDCBAndTimeoutsW
SetCalendarInfoW
GetFileSizeEx
GetProfileSectionA
GetDefaultCommConfigW
GetConsoleAliasesLengthA
LocalFlags
GetLastError
lstrcatA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlUnwind
GetACP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
CloseHandle
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
user32
CharUpperA
GetCursorInfo
advapi32
ImpersonateNamedPipeClient
AbortSystemShutdownW
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ