Static task
static1
General
-
Target
activator.exe
-
Size
385KB
-
MD5
ead0dea504ad945dcfb7c4fa57fa59cf
-
SHA1
8a41ecfe56bebd4a6a42914accca5a08d2cb5419
-
SHA256
869f03595032853a6731219604da891a83803f3607f143b65149067bc7524ce8
-
SHA512
8db65d7e57364d296b7163b02bf6fd72d219c362ffab084733ed9cf46012912f46e80111cce617a27e33d19bf425b84d9b5a6839d2c20102e7c6fbc91105791a
-
SSDEEP
6144:koQgNaeJPrcbNutSp8RO998i6DsTVf2n7hhGJNiAsK/mrWoqlFXTTkJmND9LlMV2:z5WZ3lvhfTNbsSmSTTk2D95y/
Malware Config
Signatures
Files
-
activator.exe.exe windows x86
a506b072e31cd6d8ea6c1e940b069681
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameExA
GetComputerNameA
GetWindowsDirectoryA
GetVolumeInformationA
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
GetLastError
SetLastError
VirtualAlloc
VirtualFree
VirtualQuery
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
FormatMessageA
LoadLibraryA
VirtualProtect
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
user32
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
vcruntime140
memcpy
_except_handler4_common
__std_exception_copy
strchr
memmove
_CxxThrowException
__std_exception_destroy
strrchr
memchr
strstr
memset
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
malloc
free
api-ms-win-crt-string-l1-1-0
strlen
strncpy
strpbrk
strncmp
strncpy_s
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
system
_crt_atexit
_set_app_type
exit
_controlfp_s
_seh_filter_exe
terminate
strerror
_errno
api-ms-win-crt-time-l1-1-0
_localtime64
_mktime64
strftime
clock
_gmtime64
_difftime64
_time64
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-stdio-l1-1-0
__p__fmode
__acrt_iob_func
__stdio_common_vfprintf
tmpnam
getchar
fopen_s
fwrite
fclose
fgetc
fseek
_set_fmode
__stdio_common_vfscanf
ungetc
tmpfile
setvbuf
_popen
_pclose
_ftelli64
__p__commode
_fseeki64
fgets
clearerr
ftell
rewind
__stdio_common_vsprintf
putchar
fopen
ferror
feof
fread
fputs
fflush
fputc
getc
api-ms-win-crt-math-l1-1-0
_CItanh
floor
ldexp
sinh
__setusermatherr
tanh
_except1
_CIcosh
_CIsinh
cosh
api-ms-win-crt-filesystem-l1-1-0
remove
rename
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
setlocale
Sections
.text Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ