Static task
static1
General
-
Target
svhost.bin
-
Size
346KB
-
MD5
9a68727c95ec5b26defb2543b5cbc295
-
SHA1
53c6c85ed3c186461aab0c934c04942a061506f4
-
SHA256
bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0
-
SHA512
37cba52bcd12202f6d9d1e00c30c3fa10baf1fa7fb3a6ac507d7c6ed08ba157ff737be9fe4bdb0e2e04af0b2ebb6a46492a1cc09e071552b5f19d2562d34589f
-
SSDEEP
6144:lL+7taB7I3nfSC5jTS10Xc8Mv1m6HPkWa4Pn0LiFTuQZ4Oy9YqTBe6jR1:I7mI3nfSCRu10Xc8Mv1JJaGn0L8T01TD
Malware Config
Signatures
Files
-
svhost.bin.exe windows x86
15145246279dbac9c0f3d99a59f6d9e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryDosDeviceA
LocalFree
SetProcessPriorityBoost
VirtualQuery
GlobalGetAtomNameW
FindResourceA
GetComputerNameExW
GetModuleHandleA
GetTempPathA
BuildCommDCBAndTimeoutsW
GetProcAddress
VirtualProtect
OpenJobObjectW
_lwrite
UnlockFile
GetPrivateProfileStructA
GetDiskFreeSpaceExW
DefineDosDeviceA
SetVolumeMountPointW
GetAtomNameA
FlushConsoleInputBuffer
EnumResourceLanguagesA
GetCPInfoExW
GetThreadContext
lstrlenW
GetProcessAffinityMask
SetConsoleWindowInfo
CreateJobSet
CopyFileW
lstrcpynA
WriteConsoleA
GetCommandLineA
GetLastError
GetCommandLineW
InterlockedIncrement
FormatMessageW
CreateJobObjectW
InitializeCriticalSection
FindNextVolumeA
SetConsoleCursorInfo
LoadLibraryW
VerifyVersionInfoA
AddAtomW
InterlockedDecrement
LoadLibraryA
FoldStringA
GetDefaultCommConfigW
GetConsoleAliasesLengthW
lstrcpyA
TerminateThread
HeapFree
SetCriticalSectionSpinCount
GetComputerNameA
EnumSystemLocalesW
DisableThreadLibraryCalls
OpenMutexA
LocalFileTimeToFileTime
SearchPathA
SetProcessShutdownParameters
CreateMutexA
FormatMessageA
InterlockedCompareExchange
EnumDateFormatsW
GetConsoleScreenBufferInfo
LocalAlloc
SetFileShortNameA
EnumCalendarInfoExW
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameW
ReadConsoleInputA
EnumDateFormatsA
_hwrite
GetConsoleAliasA
GetQueuedCompletionStatus
lstrcatW
GetDefaultCommConfigA
GetFullPathNameW
DebugBreakProcess
AddAtomA
SetCurrentDirectoryW
SetCalendarInfoW
GetProfileSectionW
FindNextFileA
SetHandleCount
MoveFileWithProgressW
ReadConsoleOutputCharacterW
CopyFileExW
WriteProfileSectionW
GetModuleHandleW
Sleep
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MoveFileA
DeleteFileA
RaiseException
GetStartupInfoA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetModuleFileNameA
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
CloseHandle
SetStdHandle
GetConsoleOutputCP
CreateFileA
gdi32
GetCharWidth32A
GetBoundsRect
GetCharWidthW
SelectObject
advapi32
RevertToSelf
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ