Static task
static1
General
-
Target
rustup-init.exe
-
Size
9.6MB
-
MD5
6ff71b610c264796ac805db1876b3c49
-
SHA1
74f226bebf02e6d950faa9a0f0dae5096a6ae9ec
-
SHA256
2220ddb49fea0e0945b1b5913e33d66bd223a67f19fd1c116be0318de7ed9d9c
-
SHA512
5bfb569b7eee44b7b3a88b93600fb7d85928eb146cf78e070022d01b7910a7c1e95024b59828b155835ffed77f05b2deb63536ce7fc2e7cb10190d0bb4bb6c36
-
SSDEEP
98304:RRV393q5xmV7Yo/jR8YabMd6BZm5CUE11AadO8VUzM+GKxW0FZt++gqRon8m:lx+dRO8VUzMhKk0TwV0
Malware Config
Signatures
Files
-
rustup-init.exe.exe windows x64
85b3b734997ee852861da7f0f47ac9ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
NtCreateFile
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlUnwind
RtlCaptureContext
RtlVirtualUnwind
VerSetConditionMask
NtDeviceIoControlFile
NtCancelIoFileEx
RtlPcToFileHeader
RtlUnwindEx
kernel32
IsProcessInJob
QueryInformationJobObject
SwitchToThread
WakeAllConditionVariable
LCMapStringW
GetQueuedCompletionStatusEx
TryAcquireSRWLockExclusive
CreateIoCompletionPort
SetFileCompletionNotificationModes
CompareStringW
GetTimeFormatW
QueryPerformanceFrequency
QueryPerformanceCounter
SleepConditionVariableSRW
WakeConditionVariable
GetSystemInfo
SetFileInformationByHandle
GetProcAddress
GetModuleHandleW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
OutputDebugStringW
GetConsoleOutputCP
GetCommandLineA
WriteFile
GetFileInformationByHandleEx
GetConsoleMode
GetStdHandle
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
AcquireSRWLockShared
ReleaseSRWLockShared
GetDriveTypeW
GetModuleHandleExW
GetSystemTimeAsFileTime
FindClose
SetLastError
GetFileType
CreateFileA
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
SetConsoleTextAttribute
CreateJobObjectW
SetInformationJobObject
AssignProcessToJobObject
SetConsoleCtrlHandler
FlushFileBuffers
GetModuleHandleA
CreateFileW
DeviceIoControl
GetFileInformationByHandle
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
GetFileAttributesExW
MoveFileExW
Sleep
SetStdHandle
SetEndOfFile
LoadLibraryExW
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
GetNativeSystemInfo
HeapReAlloc
GetLastError
SetThreadStackGuarantee
TlsFree
WriteConsoleW
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
ReleaseMutex
GetEnvironmentVariableW
FormatMessageW
GetModuleFileNameW
GetCommandLineW
GetFullPathNameW
GetFinalPathNameByHandleW
FindNextFileW
CreateDirectoryW
ReadConsoleW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
ReadFileEx
SleepEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
CreateProcessW
DuplicateHandle
CreateNamedPipeW
CreateThread
GetCurrentThread
WriteFileEx
WaitForMultipleObjects
GetOverlappedResult
CreateEventW
CancelIo
ReadFile
ExitProcess
FindFirstFileW
DeleteFileW
RemoveDirectoryW
CreateHardLinkW
SetFileAttributesW
CopyFileExW
SetHandleInformation
GetTempPathW
EncodePointer
PostQueuedCompletionStatus
GlobalMemoryStatusEx
RaiseException
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
UnhandledExceptionFilter
AddVectoredExceptionHandler
GetCurrentProcess
GetSystemDirectoryA
FreeLibrary
GetTickCount
GetCurrentProcessId
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
MoveFileExA
HeapFree
HeapAlloc
GetProcessHeap
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetEnvironmentVariableW
GetStringTypeW
GetTimeZoneInformation
GetEnvironmentVariableA
VerifyVersionInfoW
GetFileSizeEx
HeapSize
SetFilePointerEx
advapi32
SystemFunction036
OpenProcessToken
RegDeleteTreeW
RegDeleteValueW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
ole32
CoCreateInstance
CoInitializeEx
oleaut32
SysStringLen
SysFreeString
crypt32
CertDuplicateCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindCertificateInStore
CryptStringToBinaryA
CertFindExtension
PFXImportCertStore
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertEnumCertificatesInStore
CertFreeCertificateContext
CertDuplicateCertificateContext
CertCloseStore
CertDuplicateStore
CertAddCertificateContextToStore
CertOpenStore
CryptDecodeObjectEx
CertGetEnhancedKeyUsage
ws2_32
connect
bind
WSACleanup
ioctlsocket
setsockopt
recv
send
WSASend
WSACloseEvent
WSACreateEvent
getsockopt
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetLastError
closesocket
getsockname
WSAGetLastError
getpeername
WSAStartup
WSASocketW
WSAWaitForMultipleEvents
htons
getaddrinfo
ntohs
shutdown
freeaddrinfo
WSAIoctl
__WSAFDIsSet
select
accept
htonl
socket
listen
shell32
SHGetFolderPathW
ShellExecuteW
bcrypt
BCryptGenRandom
secur32
FreeContextBuffer
DeleteSecurityContext
EncryptMessage
FreeCredentialsHandle
ApplyControlToken
AcceptSecurityContext
InitializeSecurityContextW
QueryContextAttributesW
DecryptMessage
AcquireCredentialsHandleA
userenv
GetUserProfileDirectoryW
user32
SendMessageTimeoutA
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ