Static task
static1
General
-
Target
442e4ac20bf464693191725ebc0312d565365195a110fc36c1ac7ee0d7a57901
-
Size
354KB
-
MD5
a2379ee016504345cdca39d6410f33d8
-
SHA1
691c92acfbbc41af017f60a890780f074f64ff29
-
SHA256
442e4ac20bf464693191725ebc0312d565365195a110fc36c1ac7ee0d7a57901
-
SHA512
d357835033b5ce21f246a6db0a16ac21b9503131b29e9a8cdfbf4fd5c7ad5210c8b09cca30039d6ee654a5521262d0edc3d0d548372e7ff77d64751b4fec1f90
-
SSDEEP
6144:zo+dHmciDvyzXoPhfaN6TVaR5CjwM/Vmc6S/mVm4nqxX48iMdg25aNX1pP:8rciDKzXoP5npaR5QwPc6fUXYc14
Malware Config
Signatures
Files
-
442e4ac20bf464693191725ebc0312d565365195a110fc36c1ac7ee0d7a57901.exe windows x86
e2cd427fa10dbf41d002ae2636766bde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExA
DnsHostnameToComputerNameW
VerifyVersionInfoA
ReadConsoleOutputCharacterW
FlushConsoleInputBuffer
LockFile
GetProfileSectionA
QueryDosDeviceW
IsSystemResumeAutomatic
SetProcessPriorityBoost
GlobalGetAtomNameA
lstrlenA
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
WriteConsoleInputA
FindResourceA
GetComputerNameExW
OpenEventA
CallNamedPipeA
GetModuleHandleA
GetSystemDirectoryA
SetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
LoadLibraryA
MoveFileWithProgressW
GetCommandLineA
InterlockedDecrement
GetCalendarInfoW
SearchPathA
CreateActCtxA
FormatMessageA
EnterCriticalSection
GetSystemDefaultLangID
GetConsoleAliasesLengthA
WriteProfileSectionA
AddAtomA
InterlockedIncrement
HeapSize
_hread
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
IsDBCSLeadByte
GetSystemWow64DirectoryA
GetLastError
GetConsoleAliasExesLengthW
DebugBreak
FindNextFileW
GetDefaultCommConfigA
GetConsoleAliasesLengthW
LoadLibraryW
GetModuleHandleW
VirtualAlloc
GetOEMCP
GetMailslotInfo
GetDiskFreeSpaceExA
GlobalGetAtomNameW
WriteConsoleW
EnumSystemLocalesA
LocalFileTimeToFileTime
SearchPathW
GetComputerNameExA
FindNextFileA
ResetEvent
CreateMutexA
FindResourceW
SetCommState
InterlockedExchangeAdd
CreateFiber
GetConsoleSelectionInfo
LocalAlloc
HeapAlloc
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameA
GetComputerNameW
ReadConsoleInputA
GetPrivateProfileStructW
_hwrite
LocalUnlock
OpenWaitableTimerA
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
GetFullPathNameW
GetThreadPriority
MapUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectW
CreateFileW
BuildCommDCBAndTimeoutsW
SetCalendarInfoW
FlushFileBuffers
CloseHandle
EnumDateFormatsW
GetTickCount
LocalFlags
CreateFileA
GetConsoleOutputCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapReAlloc
GetACP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
user32
GetListBoxInfo
LoadMenuW
CharUpperW
GetMenuInfo
GetCursorInfo
advapi32
RevertToSelf
AbortSystemShutdownA
msimg32
AlphaBlend
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 171KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ