Static task
static1
General
-
Target
3728e0bb98df94d8806e0290e9aebd2e61fd32b418858dc3b13792b6c1798fb8
-
Size
279KB
-
MD5
d273478c221b76f18b588298b3678155
-
SHA1
5825e3a95c4596414d321834b39f228221fed389
-
SHA256
3728e0bb98df94d8806e0290e9aebd2e61fd32b418858dc3b13792b6c1798fb8
-
SHA512
bfeea9d43d5cebec74e2e56b4065f67952eab95ce9db819386c6f643fea4eb4603a772804abbf4d167b3c47fdfd8d6dc94bf047977f76a710d21887bcba3bb69
-
SSDEEP
6144:1jmIIHiDUiGl5K9bPHLHr4ni4kjZWBwvHamDjC0PrH:Va4UiGi9bzHr4niV/xrP
Malware Config
Signatures
Files
-
3728e0bb98df94d8806e0290e9aebd2e61fd32b418858dc3b13792b6c1798fb8.exe windows x86
e01af879bcdcce88283626a3ac54c6a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsW
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameW
VerifyVersionInfoA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
LockFile
GetProfileSectionW
QueryDosDeviceA
IsSystemResumeAutomatic
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenA
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
GetConsoleTitleW
GetComputerNameExA
OpenEventW
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryW
SetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
LoadLibraryA
MoveFileWithProgressA
GetCommandLineA
InterlockedExchangeAdd
SearchPathW
CreateActCtxW
FormatMessageW
GetModuleHandleA
EnterCriticalSection
CreateNamedPipeA
GetSystemDefaultLangID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
InterlockedIncrement
HeapFree
_hwrite
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
IsDBCSLeadByte
GetSystemWow64DirectoryA
WriteConsoleInputA
GetPrivateProfileIntW
GetConsoleAliasExesLengthW
DebugBreak
GetTickCount
VerifyVersionInfoW
VirtualAlloc
GetOEMCP
lstrcpyA
GetMailslotInfo
GetDiskFreeSpaceExA
WriteConsoleW
EnumSystemLocalesA
FileTimeToSystemTime
ResetEvent
CreateMutexA
FindResourceA
SetCommState
FormatMessageA
ConvertThreadToFiber
GetConsoleSelectionInfo
LocalAlloc
lstrcpyW
HeapReAlloc
GetFileAttributesA
GetSystemWindowsDirectoryA
GetConsoleTitleA
ReadConsoleInputW
GetComputerNameA
GetPrivateProfileStructW
LocalUnlock
OpenWaitableTimerW
EnumResourceNamesA
FillConsoleOutputCharacterA
GetFullPathNameW
GetThreadPriority
FreeUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectW
CreateFileA
BuildCommDCBAndTimeoutsW
SetCalendarInfoW
GetFileSizeEx
GetProfileSectionA
GetDefaultCommConfigW
GetConsoleAliasesLengthA
LocalFlags
GetLastError
lstrcatA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlUnwind
GetACP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
CloseHandle
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
user32
CharUpperA
GetCursorInfo
advapi32
ImpersonateNamedPipeClient
AbortSystemShutdownW
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ