Static task
static1
General
-
Target
6bd6d5161f3d081150164df3cf65d255175724542be362727f48b056003a9162
-
Size
4.0MB
-
MD5
11e1119bcad0cf09f540781fbad166a5
-
SHA1
ae92af6f7a5c6fbb22c1696ea1b4c49d20ab35ea
-
SHA256
6bd6d5161f3d081150164df3cf65d255175724542be362727f48b056003a9162
-
SHA512
a475585453613ce843940159183f5b0893bb000c39cfaa0a0d4098892659c3c3fe2e14e58485c6b3c8eac29ccc84278a1d2d016e6d7a2337a4125d83dfc36f79
-
SSDEEP
98304:Q94OMsckcjiJmj5kF1Ihznip2zZzSiIftvK:QuO0kwiJmj5kF1Ihr22RSi5
Malware Config
Signatures
Files
-
6bd6d5161f3d081150164df3cf65d255175724542be362727f48b056003a9162.exe windows x86
6a29ffb15ed556e663888d6349530be7
Code Sign
d3:be:7e:b5:36:d4:2a:cc:f7:9b:5c:df:63:b6:00:c2Certificate
IssuerPOSTALCODE=10305Not Before28-08-2022 08:07Not After28-08-2023 08:07SubjectPOSTALCODE=103055d:c7:4f:bb:56:d0:bf:ec:50:89:a9:d2:e4:ed:4f:fd:49:a5:b5:82:de:43:77:0c:7d:94:58:d6:70:16:36:30Signer
Actual PE Digest5d:c7:4f:bb:56:d0:bf:ec:50:89:a9:d2:e4:ed:4f:fd:49:a5:b5:82:de:43:77:0c:7d:94:58:d6:70:16:36:30Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificatePOSTALCODE=1030526-08-2022 16:48 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
InterlockedIncrement
SetWaitableTimer
WaitNamedPipeA
BuildCommDCBW
GetSystemTimeAdjustment
ReadConsoleInputA
SearchPathA
EnumResourceTypesW
GetCPInfoExA
ExpandEnvironmentStringsW
GetModuleFileNameA
BeginUpdateResourceW
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterA
WriteConsoleW
DeleteFileW
LocalAlloc
GetProcAddress
GetModuleHandleW
AddRefActCtx
GetConsoleAliasA
GetSystemWindowsDirectoryW
FindFirstChangeNotificationA
GlobalAddAtomA
WritePrivateProfileStringW
EnumResourceNamesA
SearchPathW
lstrcpynA
FindFirstFileExW
GetVolumeInformationA
GetCurrentDirectoryA
GetConsoleAliasesLengthW
AllocConsole
GetConsoleTitleW
SetCommMask
SetPriorityClass
OpenJobObjectW
_lclose
CreateDirectoryExW
FillConsoleOutputCharacterW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapFree
Sleep
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
advapi32
BackupEventLogW
CloseEventLog
DeregisterEventSource
BackupEventLogA
GetNumberOfEventLogRecords
GetEventLogInformation
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.9MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ