Static task
static1
General
-
Target
9a791979381686b4a8cf08646d19a1e9ed91f2e1399c415f362289d1a5c2bc84
-
Size
444KB
-
MD5
7a1cba9f6d9a8454da405d8a02af9d73
-
SHA1
c7b4ccf1e4d8c4e0e66071210f6548eb80537a46
-
SHA256
9a791979381686b4a8cf08646d19a1e9ed91f2e1399c415f362289d1a5c2bc84
-
SHA512
05a8b80feb684de34b37810d464699543547e887570e376e025399613ecffa5696518097aef5daa05ba49a74e36c73d83885a6af84f52a2ee21e9c0d881094bb
-
SSDEEP
12288:CL0R34fMN1ax0z79nHLdt1mCsqVZJOEDZYVc8c:CLoj3amz5HBt1mCJVZJLDe
Malware Config
Signatures
Files
-
9a791979381686b4a8cf08646d19a1e9ed91f2e1399c415f362289d1a5c2bc84.exe windows x86
5c63addc95d471efe0eb0c5303bcace4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsW
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameW
VerifyVersionInfoA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
LockFile
GetProfileSectionA
QueryDosDeviceW
IsSystemResumeAutomatic
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenA
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExW
OpenEventW
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryW
SetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
LoadLibraryA
MoveFileWithProgressA
GetCommandLineA
InterlockedDecrement
GetConsoleTitleW
SearchPathW
CreateActCtxW
FormatMessageW
GetModuleHandleA
EnterCriticalSection
LoadLibraryW
CreateNamedPipeW
GetSystemDefaultLangID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
InterlockedIncrement
HeapFree
_hwrite
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
IsDBCSLeadByte
WriteConsoleInputA
GetLastError
GetPrivateProfileIntW
GetConsoleAliasExesLengthW
DebugBreak
GetTickCount
VerifyVersionInfoW
VirtualAlloc
GetOEMCP
lstrcpyA
GetMailslotInfo
GetDiskFreeSpaceExA
WriteConsoleW
EnumSystemLocalesA
FileTimeToSystemTime
GetComputerNameExA
ResetEvent
CreateMutexA
FindResourceA
SetCommState
FormatMessageA
InterlockedExchangeAdd
ConvertThreadToFiber
GetConsoleSelectionInfo
LocalAlloc
lstrcpyW
HeapReAlloc
GetFileAttributesA
GetSystemWindowsDirectoryA
ReadConsoleInputW
GetComputerNameA
GetPrivateProfileStructW
LocalUnlock
OpenWaitableTimerW
EnumResourceNamesA
FillConsoleOutputCharacterA
GetFullPathNameW
GetThreadPriority
FreeUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectW
CreateFileA
BuildCommDCBAndTimeoutsW
SetCalendarInfoA
GetFileSizeEx
GetDefaultCommConfigW
GetConsoleAliasesLengthA
LocalFlags
GetSystemWow64DirectoryA
lstrcatA
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
WideCharToMultiByte
DeleteFileA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetStdHandle
WriteFile
OutputDebugStringA
GetFileType
OutputDebugStringW
ExitProcess
GetACP
IsValidCodePage
CloseHandle
GetModuleFileNameA
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapSize
IsValidLocale
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoW
user32
CharUpperA
GetCursorInfo
advapi32
ImpersonateNamedPipeClient
AbortSystemShutdownW
Sections
.text Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 173KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ